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Abstract 

Currently, there are no known explicit algorithms for the great majority of problems in the dynamic 
distributed message-passing model. Instead, most state-of-the-art dynamic distributed algorithms are 
constructed by composing a static algorithm for the problem at hand with a simulation technique 
that converts static algorithms to dynamic ones. We argue that this powerful methodology does not 
provide satisfactory solutions for many important dynamic distributed problems, and this necessitates 
developing algorithms for these problems from scratch. 

In this paper we develop the first fully dynamic distributed algorithm for maintaining sparse span- 
ners. Our algorithm improves drastically the quiescence time of the state-of-the-art algorithm for 
the problem. Moreover, we show that the quiescence time of our algorithm is optimal up to a small 
constant factor. In addition, our algorithm improves significantly upon the state-of-the-art algorithm 
in all efficiency parameters, specifically, it has smaller quiescence message and space complexities, and 
smaller local processing time. 

Finally, we use our technique to improve the state-of-the-art streaming algorithm for constructing 
sparse spanners, and to devise an efficient fully dynamic centralized algorithm for maintaining sparse 
spanners. 
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1 Introduction 



1.1 Discussion and Main Results 

In the message-passing model of distributed computing a communication network is modeled by an 
unweighted graph, and each vertex of this graph hosts a processor. The vertices communicate through 
network hnks, modeled by graph edges. Devising algorithms for the message-passing model (henceforth, 
distributed algorithms) is an active area of research [l]-[3],[7] - [15], [26, 29, 30, 31, 32]. (See [30] for an 
excellent survey.) 

The main motivation for the study of algorithmic problems in this model is the urge to devise real-life 
protocols for the growing body of commimication networks, particularly the Internet. However, ever since 
the theoretic study of distributed algorithms started in the early eighties, it was commonly understood 
[8, 15, 1, 2, 9, 11, 3] that real-life networks are inherently dynamic, i.e., the communication links can 
crash and revive at will. The necessity to devise algorithms that are sufficiently robust to work properly 
in an unstable environment became even more apparent in view of such recent developments in the world 
of telecommunications as ad-hoc, sensor, and wireless networks, which are all inherently unstable. 

Moreover, the resurgence of these novel network architectures dictates certain limitations on algo- 
rithms that can be used. Particularly, these algorithms have to use limited computational resources, such 
as local processing time and space, just because the processors in these networks may well be uncapable of 
undertaking a heavy computational task. Even more importantly, these algorithms need to be simple, due 
to both computational and economical limitations of processors that are supposed to execute them. (By 
economical limitations we mean the necessity to keep the overall manufacturing cost of these processors 
low.) 

Currently, there arc no known explicit dynamic distributed algorithms for the great majority of 
distributed problems. Instead, most dynamic distributed algorithms are constructed by composing a 
static distributed algorithm for the problem at hand with a simulation technique that converts static 
algorithms to dynamic ones. (There are important exceptions, particularly, [3, 8].) However, the currently 
known simulation techniques all suffer from significant drawbacks. The simulation technique of [1, 13] has 
super-linear in the number of vertices n time and space overheads; the technique of [15] has super-linear 
in n message and space overheads. Both these techniques entail a large overhead in local processing. 

Finally, the simulation technique of Awerbuch et al. [11] has only polylogarithmic time, message, 
and space overheads, but entails a large overhead in local processing. More importantly, the technique 
of [11] is extremely complicated, and not self-contained. Particularly, it uses a reset procedure from [1] 
or from [12], and both of them are rather complex by themselves. In addition, it uses an algorithm for 
constructing sparse neighborhood covers, based on the algorithm of Awerbuch and Peleg [13], but more 
involved than the latter. Also, to adapt the algorithms for constructing these neighborhood covers to an 
asynchronous network, a bootstrap technique is employed [13]. Finally, on top of it, an involved variant 
of a local rollback algorithm of Awerbuch and Sipser [15] is used. 

This complex nature of the algorithm of [11] makes it unsuitable for running on simple network 
devices. Moreover, the paper of [11] was published only as an extended abstract, and no full version 
of this paper ever appeared. Consequently, whoever would wish to implement the algorithm of [11] in 
practice will have to fill in a significant body of missing details. From the theoretical viewpoint, though 
the work of [11] was a conceptual breakthrough in its approach to simulation, using their result as a 
blackbox is problematic because the only available version of the paper [11] contains only a sketch of the 
proof of their (very strong and general) result. 

These considerations raise the necessity to develop dynamic distributed algorithms for basic algo- 
rithmic problems from scratch, or to develop alternative simulation techniques. In this paper we follow 
the first avenue, and develop an extremely efficient fully dynamic distributed algorithm for maintaining 
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sparse spanners. Informally, graph spanners can be thought of as sparse skeletons of communication 
networks that approximate to a significant extent the metric properties of the respective networks. Span- 
ners serve as an underlying graph-theoretic construct for a great variety of distributed algorithms. Their 
most prominent applications in this context include synchronization [7, 31, 13, 11], routing [32, 14, 35], 
appmximate distance computation [21, 22], and online load balancing [10]. 

The state-of-the-art distributed static algorithm for constructing sparse spanners is a distributed 
variant of the algorithm of Baswana and Sen [17]. For an arbitrary positive integer parameter and 
arbitrary undirected unweighted n- vertex graph, this algorithm constructs (2i — l)-spanner with expected 
0{t ■ n^"*"^/*) number of edges. (This tradeoff is optimal except for the factor of t in the estimate on the 
number of edges.) The running time of this algorithm is 0{t), its message complexity is Odi^j • i), and 
its space requirement for a vertex v running the algorithm is 0{deg{v) ■ logra) bits, where deg{v) is the 
degree of the vertex v. 

The common way to measure performance of distributed dynamic algorithms is through quiescence 
complexities. Specifically, one assumes that all topology updates (link crashes and appearances) stop 
occurring at a certain time a, and measures how long is the time period, and how many messages are 
sent during this time period, during which the algorithm stabilizes., that is, reaches a state in which the 
(distributed) structure that it maintains starts again to satisfy the properties of the problem at hand. 
This time period is called the quiescence time complexity of the the algorithm, and the number of messages 
as above is called the quiescence message complexity of the algorithm. 

Running the algorithm of Baswana and Sen [17] on top of the simulation technique of Awerbuch et 
al. [11] results in a dynamic distributed algorithm for maintaining a {2t — l)-spanner of expected size 
0{t ■ n^+^/*) with quiescence time of 0{t ■ log^ n), quiescence message complexity of 0{t ■ \E\ ■ log^ n), and 
space requirement of 0{deg{y) ■ log^n). 

We devise a dynamic distributed algorithm for maintaining a (2t — l)-spanner of the same expected 
size that improves the result of [17, 11] described above in all measures of efficiency. Particularly, our 
result reduces drastically the quiescence time from 0{t ■ log'^ n) to 3t. (In many cases the parameter t is a 
universal constant, and it is always true that t = O(logn). Also, although we were not able to explicate 
the constant hidden by the 0-notation in the 0(log^ n) time overhead of the dynamization result of [11], 
to the best of our understanding it is at least 32, that is, at least ten times larger than the leading 
constant factor in the quiescence time complexity of our algorithm.) The quiescence message complexity 
of our algorithm is 0{t ■ \E\), and its space requirement is 0{deg{v) ■ log ri) bits (for a vertex v). Note 
that the latter is optimal up to a constant factor as long as every vertex maintains the identity number 
of each of its neighbors, and, moreover, since every vertex v must maintain at least one bit for each edge 
e adjacent to v indicating whether the edge e is up or down, it follows that this space requirement is 
optimal up to a logarithmic in n factor (under no assumptions). 

Moreover, in both algorithms the vertices work in rounds or computational cycles even in the asyn- 
chronous setting (more details about the model appear Section 2), and on each round each vertex v 
performs a certain local computation for (virtually) every edge adjacent to v. In our algorithm this 

local computation is extremely efficient, and requires 0(1) expected time, O \o^\(ygdeglv) ) ™ 

worst-case, and O [^.J^^^^^ time with high probability. 

It is not clear to us what is the processing time-per-edge in the algorithm of [17, 11], because no explicit 
bound is provided in [11] for the local processing time overhead for the simulation algorithm described 
therein. However, the latter technique employs the so-called local rollback method that maintains parts 
of the communication history, and undoes certain operations from this history upon a topology update. 
This technique appears to be quite costly in terms of local computation, and consequently, it seems safe 
to assume that the local processing time-per-edge of the algorithm of [17, 11] is nowhere as low as that 
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Table 1: A comparison between the algorithm of [17, 11] and our new dynamic distributed algorithm. 
The space requirement is for a specific vertex v. The shortcut ".l.b." stands for "lower bounds" . 



of our algorithm. See Table 1 for a concise comparison between the different efficiency measures of our 
algorithm with that of [17, 11]. 

We also show that the quiescence time of our algorithm is near-optimal. Specifically, we show that 
for any constant parameter t any distributed algorithm that maintains sparse (2t — l)-spanncrs in a fully 
dynamic setting has quiescence time greater or equal to [ftj- In fact, our lower bound applies even for 
static synchronous algorithms that are allowed to send messages of an arbitrarily large size, while messages 
sent by our algorithm are all of size O(logn). Moreover, under Erdos girth conjecture our lower bound 
can be improved to t — 1. We also extend the lower bound for super-constant values of t. Specifically, the 

lower bound applies as is for 1 < t = o [^f^^) ■ For t in the range Q (y^^^) = t = o [i;^^) 
we show that any algorithm that has the properties of our algorithm has quiescence time (| — o(l)) t or 
greater. Finally, for the range u (^ i^gf^.,,^ = t = O(logn), the respective lower bound is ft (^ log'iogn ) • 

To summarize, our algorithm compares very favorably to the state-of-the-art benchmark algorithm 
that combines the dynamization technique of [11] with the distributed variant of [17]. No less important 
is that our algorithm is reasonably simple and self-contained^, in contrast to the simulation algorithm 
of [11]. In fact, the incremental variant of our algorithm is extremely simple, and can be hard-wired in 
even the most primitive network devices. The general variant of our algorithm is more complex, but 
nevertheless, is amenable for implementation on most even rather simple network devices. 



1.2 Additional Features of our Algorithm 

Our algorithm has a number of additional features. First, not only that its quiescence time is at most 

3t, but if at a time a edges stop crashing but are still allowed to appear, still at time a + 3t the spanner 
maintained by the algorithm will provide a stretch guarantee of 2t — 1 for all edges of the graph present 
in the network at time a. (Edges that appeared at some time /3, /? > a, will be taken care of by time 
(3 + 3t.) 

Second, our algorithm behaves even better in an incremental environment. (This is an environment 
in which new edges may appear, but no existing edge ever crashes.) The quiescence time of our algorithm 
becomes 2t instead of 3t in this setting. In addition, this quiescence time decreases further if the sets of 
edges that appear in the network possess a certain convenient structure. Particularly, if the set F of edges 

^Except for a number of data structures of Beame and Fich [18], Andersson and Thorup [5], and Dietzfilbinger et al. [20], 
that we use to achieve a very low local processing time-per-edge. Without using these data structures our local processing 
time-per-edge would grow slightly, but it will still be expected 0(1), worst-case O {log deg{v)), and with high probability 
O {{log n)/t + log log n). Other complexity measures of the algorithm would stay unchanged. 
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that appear in the network is a partial matching, then our algorithm takes care of all edges F within one 
single round or two time units after these edges appear, depending on whether the network is synchronous 
or asynchronous, respectively. The size of the spanner keeps to be bounded by 0{{t ■ logn)^"^/* • 
with high probability all through this process. Note that the set F may contain as many as n/2 edges 
appearing all around the network, and moreover, the topology updates may arrive in multiple bursts. 
Nevertheless, they arc processed by the algorithm on the flyl This result extends also to more complex 
topology update edge sets than partial matchings. Specifically, if the update edge set F has maximum 
degree A then it is processed by the algorithm within 2A rounds or time units. 

Finally, we show stronger bounds on the quiescence time than our general bounds even if most, but 
not all, the edges of the network arc allowed to crash. (Edges arc still allowed to appear at will though.) 
Specifically, we identify a certain set of at most n • (i — 1) backbone edges in the spanner constructed by 
the algorithm. Suppose that backbone edges do not crash for a reasonably long period of time. Then an 
arbitrary set of non-backbone edges may crash, and the algorithm takes care of their crashes within one 
round or two time units in synchronous and asynchronous networks, respectively. In other words, once 
again the spanner adapts to crashes of the non-backbone edges on the flyl Moreover, we show that for 
any particular edge of the network, it has only a probability of roughly n~^^^ to belong to the backbone. 
Hence every edge of the original network is much more likely than not to be a non-backbone edge, and 
this makes the assumption that backbone edges do not crash weaker and more realistic. We remark, 
however, that the bound of 3t on the quiescence time of our algorithm requires no assumptions. The 
assumptions are needed only if one is interested in yet stronger bounds. 



1.3 Additional Results 
1.3.1 The Streaming Model 

A variant of our algorithm improves significantly the state-of-the-art algorithm of Feigenbaum et al. [24] 
for constructing sparse spanners and approximate all-pairs-distance-computation (henceforth, APDC) in 
the streaming model of computation. 

The study of the streaming model became an important research area after the seminal papers of 
Alon, Matias and Szegedy [4], and Feigenbaum et al. [25] were published. More recently, research in 
the streaming model was extended to traditional graph problems [16, 23, 22, 24]. The input to a graph 
algorithm in the streaming model is a sequence (or stream) of edges representing the edge set E of the 
graph. This sequence can be an arbitrary permutation of the edge set E. 

The state-of-the-art streaming algorithm for computing a sparse spanner for an input (unweighted 
undirected) n- vertex graph G = iy, E) was presented in a recent breakthrough paper of Feigenbaum et 
al. [24]. Their algorithm, with high probability, constructs a (2t + l)-spanner with 0{t ■ logn • n^+^/*) 
edges in one pass over the input using 0{t ■ log^ n ■ ra^"'"^/*) bits of space. It processes each edge in the 
stream in time 0{t^ ■ logn • n^/*). Their result also immediately gives rise to a streaming algorithm for 
{2t + l)-approximate APDC algorithm with the same parameters. 

Our algorithm constructs a {2t — l)-spanner with 0{{t ■ logn)^^^/^ ■ n^+^/*) edges in one pass over the 
input using 0(t^~^/* • log^^^^*n • n^+^/*) bits of space. (The size of the spanner and the number of bits 
are with high probability.) Most importantly, the processing time-per-edge of our algorithm is drastically 
smaller than that of Feigenbaum et al. . Specifically, the expectation of the processing time-per-edge in 
our algorithm is 0(1), it is O (y'^^^f^) "'^ith high probability, and in the worst-case processing an edge 

e = {v,u) requires O where deg{e) = max{deg{v), deg{u)}. 

To summarize, our algorithm constructs a spanner with a slightly better stretch guarantee {2t — 1 
instead of 2t + 1), with a slightly smaller number of edges and number of bits of space used (by a factor 
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Table 2: A comparison between the algorithm of Feigenbaum et al. [24] and our new streaming algo- 
rithm. The degree of an edge e = {u,v) is m.ax{deg{v), deg{u)}. The word "whp" stands for "with high 
probability" . 

of (t -logn)^/*), and it does so using a drastically reduced (and very close to optimal) processing time-per- 
edge, at no price whatsoever. Our result also gives rise to an improved streaming (2t — l)-approxiniatc 
APDC algorithm with the same parameters. A concise comparison of our result with the state-of-the-art 
result of Feigenbaum et al. [24] can be found in Table 2. 

1.3.2 A Centralized Fully Dynamic Algorithm 

Finally, a variant of our algorithm can be seen as a fully dynamic centralized (versus distributed) algorithm 
for maintaining a {2t — l)-spanner with 0{{t ■ log n)^"^/*/!^"*"^/*) edges. The incremental update time of 
this algorithm is exactly the processing timc-pcr-cdgc of our streaming algorithm, and, in fact, the way 
that the dynamic algorithm processes incremental updates is identical to the way that our streaming 
algorithm processes each edge of the stream. The expected decremental update time (the time required 
to update the data structures of the algorithm when an edge e is deleted) is 0{^^ ■ (tlogn)^/*), and 

moreover, with probability at least 1 — , the decremental update time is O (^^J ' where 

h = maxjlog de5(e),loglogn}. The size of the data structures maintained by an incremental variant 
of our algorithm is 0{t^^^^^ ■ (logn)^^-*^/* • n^+^/*) bits. To cope with decremental updates as well, our 
algorithm needs to maintain Od-El • logn) bits. (Note that the incremental algorithm maintains data 
structures of overall size sublinear in the size of the input \E\. This is not really surprising, since this is 
essentially a streaming algorithm.) 

To our knowledge, this is the first fully dynamic centralized algorithm for maintaining sparse spanners 
that provides non-trivial bounds for a wide range of stretch parameter t. The only previously known 
algorithm of this type is a recent result due to Ausillo et al. [6], who devised a fully dynamic algorithm for 
maintaining 3- and 5-spanners of optimal size with 0(n) amortized time per operation for an intermixed 
sequence of Q,{n) edge insertions and deletions. 

I. 4 Our Techniques 

Our basic static distributed algorithm combines the techniques of Feigenbaum et al. [24], and of Baswana 
and Sen [17], with some new ideas. The extension of the algorithm to dynamic setting requires, however, 
a novel approach to handle edge crashes. The standard approach is a rollback technique [8, 1, 15, 9, 12, 

II, 3], which makes each vertex to maintain some part of the history of communication, and to undo 
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certain operations from this history once an edge crash occurs. Our approach is mainly based on looking 
for a "replacement" for every crashing edge. Our algorithm also undoes certain operations in some cases 
(when backbone edges crash), but the history of communication is never explicitly maintained, but rather 
the list of operations to be undone is deduced from the current state of affairs. 

We believe that this method of undoing operations without maintaining an explicit history of commu- 
nication is the key to the extreme robustness and efficiency of our algorithm, and is our main technical 
contribution. In this paper we demonstrate the power of this method by using it to improve the state-of- 
the-art algorithms for constructing spanners in three different computational models. Specifically, these 
models are the dynamic distributed, streaming and dynamic centralized ones. It is plausible that this 
method will be found useful for other dynamic problems. 

1.5 The Structure of the Paper 

Terminology and definitions that are commonly used throughout the paper are presented in Section 2. 
Section 3 is devoted to the streaming model of computation. In this section we also do some groundwork 
for the analysis of our algorithm in other computational models. In Section 4 we view the algorithm of 
Section 3 as a centralized dynamic algorithm, and extend the analysis of Section 3 to this setting. In 
Section 5 we turn our attention to distributed models of computations, which are the main subject of 
this paper. Sections 5-10 are all devoted to this topic. 

In Section 5 we present and analyze a static synchronous distributed algorithm for constructing sparse 
spanners. This algorithm is very simple, but nevertheless, very efficient, and it illustrates some of the 
main ideas used in all other algorithms presented in the paper. In Section 6 this algorithm and its analysis 
are extended to the incremental setting. Section 7 is devoted to the issue of asynchrony, and there we 
argue that all our algorithms extend to the asynchronous setting. Sections 8 and 9 extend the algorithm 
of Section 7 to the distributed fully dynamic setting. The main topic of these sections is coping with 
edge crashes. This is done in two stages. In Section 8 we assume that backbone edges never crash, and 
in Section 9 this assumption is abandoned. Section 10 is devoted to the lower bounds. 

2 Preliminaries 

In this section we introduce the computational models and basic terminology. 

In the message-passing model a communication network at hand is modeled by an undirected un- 
weighted n- vertex graph G = {V,E). Each vertex v e V hosts a processor. The processors share no 
common memory, and they communicate via edges of the graph G. Specifically, a processor v can send 
and receive messages over each edge e = {v,u) adjacent to the vertex v in G. Communication links of 
the network are assumed to have a limited capacity, and this is modeled by assuming that the size of 
each single message is at most O(logn). Vertices are assumed to have distinct identifiers from the range 
{1,2. ..,n}. 

In the synchronous model the communication occurs in discrete rounds. On each round each vertex v 
is allowed to send messages to all its neighbors in G. A message sent by a vertex v over an edge e = {v,u) 
on round R arrives to its destination u before round R+1 starts. In the asynchronous model each vertex 
maintains its own clock, and clocks of different vertices may disagree. Nevertheless, the vertices are 
assumed to work locally in a manner similar to the one in which they work in the synchronous model. 
Specifically, on each cycle of its clock ("round") each vertex v processes the messages that it has received 
since the last time it was in the receiving mode (the beginning of the previous clock cycle), and sends 
new messages that result from this processing. Messages sent from a vertex to its neighbor arrive within 
finite but unpredictable time period. The maximum duration of this time period is called the time unit. 
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The time complexity of a synchronous (respectively, asynchronous) algorithm A is the maximum num- 
ber of rounds (resp., time units) that an execution of A on lasts. The message complexity is the maximum 
overall number of messages sent during an execution of A- The space complexity is the maximum number 
of bits used by a certain vertex at a single moment during an execution of A. The local processing time- 
per-round is the maximum duration of a time period that some vertex spends on processing data locally 
on a single clock cycle (or round). In algorithms that we will consider each vertex v processes (almost) 
each edge adjacent to v on each round, and thus it makes sense to consider also the local processing 
time-per-edge. The latter is defined as the maximum duration of a time period that some vertex spends 
on processing some single edge adjacent to it locally on a certain round. 

In a dynamic setting edges of the graph are allowed to appear and disappear (henceforth, crash) at 
any time. The challenge in this context is to design algorithms that are robust to this ever-changing 
environment. An incremental (respectively, decremental) dynamic algorithm is an algorithm that can 
handle edge appearances (resp., crashes) but not crashes (resp., appearances). A fully dynamic algorithm 
is an algorithm that can handle both appearances and crashes. The usual way to measure performance 
of distributed dynamic algorithms is through quiescence time and message complexities, that is, the time 
and message requirements after the last topological change. See also the beginning of Section 1.1. 

Throughout the paper we consider topology updates that involve only appearances and crashes of 
edges. Our algorithm can cope with vertex appearances and crashes as well. The algorithm handles a 
vertex crash exactly as it handles the crash of all edges adjacent to the crashing vertex. Vertex appearances 
are handled analogously. 

We assume that the number L of crashes of backbone edges is at most polynomial in n. If this 

assumption docs not hold, our guarantee on the size of the spanner maintained by the algorithm would 
grow by a factor j^^- We believe that this limitation is not really restrictive because one can use fresh 
coin tosses after, say, n^^ rounds elapse. Our algorithm is sufficiently robust to guarantee that this switch 
to new coins does not even require to coordinate the processors (in the asynchronous scenario). 

We also assume that a message is lost only if the edge through which it was sent crashes. Moreover, 
in our model messages sent through a fixed edge e = {v,u) in a fixed direction arrive to their destination 
in the First-In-First-Out (FIFO) manner. This assumption can be eliminated at the expense of using a 
more complicated analysis. 

In addition, we assume that the number of vertices n is known in advance, in the beginning of 
computation. This assumption can be weakened so that only an upper bound h on the number of 
vertices wil be known at the beginning of computation, but then n would have to be plugged in all our 
bounds instead of n. Similarly to the algorithm of Feigenbaum et al. [24], there is an important special 
case of t = log n for which the algorithm does not need to know n in advance. In this case the probability 
p can be set as ^ independently of n. 

Finally, we assume that the input graph, the topology updates and their order, are all chosen by 
a non-adaptive adversary obliviously of the coin tosses of the algorithm. Although this assumption is 
not completely realistic, we believe that it captures many of the practical situations rather truthfully. 
In addition, this assumption is significantly weaker than an assumption of some stochastic model for 
topology updates, and the latter is very common in the application-oriented literature (see [33], and the 
references therein). Also, our assumption appears to be implicit in the previous work of [11, 24]. 

We end this section with the definition of spanner. For a parameter a, a > 1, a subgraph G' of 
the graph G = {V,E) is called an a-spanner of G if for every pair of vertices x,y V, distG'ix,y) < 
a ■ distG{x,y), where distG{u,w) denotes the distance between u and w in G. The parameter a is called 
the stretch or distortion parameter of the spanner. Also, for a fixed value oi t = 1,2,..., we say that a 
subgraph G' spans an edge e = {v,u) E E, ii distGi{v, u) <2t — \. 
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3 The Streaming Model 



In this section we present and analyze the version of our algorithm that constructs spanners in the 
streaming model of computation. 

3.1 The Algorithm 

The algorithm accepts as input a stream of edges of the input graph G = {V, E), and an integer positive 
parameter t, and constructs a (2t — l)-spanner G' = {V,H), H Q E, oi G with 0{(t ■ logn)^~^/* • n^+^/*) 
edges using only 0{\H\ ■ logn) = 0{(t ■ logn)^~^/* • ri^"*"^/*) bits of storage space, and processing each 
edge in 0(1) expected time, in one pass over the stream. Note that the space used by the algorithm is 
linear in the size of the representation of the spanner. Regarding the processing time-per-edge, processing 

the edge e requires O ( i^giog deg(e) ) worst-case, and moreover, with high probability, the 



At the beginning of the execution (before the first edge of the stream arrives), the vertices of V are 
assigned unique identifiers from the set {1, 2, . . . , n} = [n], n = \V\. (Henceforth, for any positive integer 
k, the set {1,2, ...,A;} is denoted [fc], and the set {0,1,..., /c} is denoted [(/c)].) Let I{y) denote the 
identifier of the vertex v. Also, as a part of preprocessing, the algorithm picks a non-negative integer 
radius r{v) for every vertex v of the graph from the truncated geometric probability distribution given by 



F(r = A;) = / ■ (1 - p), for every k e [{t - 2)], and P(r = t - 1) = with p = ( ) . Note that 



this distribution satisfies TP{r>k+l\r>k)=p for every k £ [{t — 2)]. 

We next introduce a few definitions that will be useful for the description of our algorithm. During the 
execution, the algorithm maintains for every vertex v the variable P{v), called the label of v, initialized 
as I{v). The labels of vertices may grow as the execution proceeds, and they accept values from the set 
{1, 2, . . . ,n ■ [t — 1)}. A label P in the range i-n + \<P<{i + l)n, for i € [{t — 1)] is said to be a 
label of level i; in this case we write L(P) = i. The value B{P) is given by B{P) = n if n divides P{v), 
and by B(P) = P{v) (mod n), otherwise. This value is called the base value of the label P. The vertex 
w = wp such that I{w) = B{P) is called the base vertex of the label P. A label P is said to exist if the 
level L(P) of P is no greater than the radius of the base vertex wp, i.e., L{P) < r{njp). The label P is 
called selected if L{P) < r{wp). Note that for a label P to be selected, it must satisfy L{P) < t — 2. 

One of the basic primitives of the algorithm is comparing the labels. We say that the labels P{v) 
and P{v') of the vertices v and v', respectively, satisfy the relation P{v) >- P{v') if and only if either 
P{v) > P{v') or {P{v) = P{v') and I{v) > I{v')). Note that for every two vertices v and v', either 
P{v) y P{v') or P{v') >- P{v). 

For a label P of level t — 2 or smaller, 



Lemma 3.1 With high probability, the number of distinct labels of level t — 1 that occur in the algorithm 



Proof: Let i G [n], and let u G F be the vertex with I{u) = i. The probability that the label n • (t — 1) + i 
occurs is equal to the probability that r{u) = t — 1, that is, Hence the expected number of labels 

of level t — 1 is n • p^~^ = 0(n^^* ■ (t ■ logn)^~^/*). The lemma follows by Chernoff bound. | 

We remark that the way that we define and manipulate labels is closely related to the way it is done 
in Feigenbaum et al. [24]. 





P(P is selected) = P(r(wp)) > L{P) + 1 | r{wp) > L{P)) = p . 



is 0{n 



V*.(t.logn)i-V*). 
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For every vertex the algorithm maintains an edge set Sp{v), initiahzed as an empty set. During the 
execution the algorithm inserts some edges into Sp{v), and never removes them. In other words, the sets 
Sp{v) grow monotonely during the execution of the algorithm. It is useful to think of the sets Sp{v) as 
divided into two disjoint subsets T{v) and X{v), Sp{v) = T{v) U X{v). The set T{v) is called the set of 
the tree edges of the vertex v, and the set X{v) is called the set of the cross edges of the vertex v. During 
the execution the algorithm constructs implicitly a tree cover of the graph. The edges of this tree cover 
are (implicitly) maintained in the sets T{v). In addition, the spanner will also contain some edges that 
connect different trees of the tree cover; these edges are (implicitly) maintained in the sets X{v). Each 
edge e that is (implicitly) inserted into the set T{v) will also be labeled by a label of v at the time of the 
insertion. An insertion of an edge e = (v, u) into the set T{v) will cause v to change its label to the label 
of u plus n, that is P{u) + n. The edge e will also be labeled by this label. 

In addition, for every vertex v a table M{v) is maintained. These tables are initially empty. Each 
table M{v) is used to store all the base values of levels P such that there exists at least one neighbor z 
of V that was labeled by P at some point of the execution of the algorithm, and such that the edge {v, z) 
was inserted into the set X{v) at that point of the execution. 

The algorithm itself is very simple. It iteratively invokes the Procedure Read-Edge on every edge of 
the stream, until the stream is exhausted. At this point it outputs the set IJ^ Sp{v) = |J„ T{v) U (J^ X{v) 
as the resulting spanner. The Procedure Read_Edge accepts as input an edge e = [u, v) that it is supposed 
to "read". The procedure finds the endpoint x of the edge e that has a greater label P{x) (with respect 
to the order relation >-). Suppose without loss of generality that x = u, i.e., P{u) y P{v). Then the 
procedure tests whether P{u) is a selected label. If it is, the edge e is inserted into the set of tree edges 
T{v) of V, and v adapts the label P{u) + n. If P{u) is not a selected label, then the procedure tests 
whether the base value B{P{u)) of the label P{u) is stored in the table M{v). If it is not, then the edge e 
is inserted into the set X{v) of the cross edges of v, and the label of v does not change. If P{u) is already 
stored in M{v) then nothing needs to be done. 

The pseudo-code of the Procedure Read_Edge is provided below. Its main difference from the descrip- 
tion above is that the sets X{y) and T(v) are not maintained explicitly, but rather instead there is just 
one set Sp{v) maintained. The reason for this difference is that we aim to present the simplest version of 
the algorithm for which we can prove the desired bounds. However, it is more convenient to reason about 
the sets X{v) and T{v) explicitly, rather than about the set Sp{v) as a whole, and thus in the analysis we 
will analyze the version of the algorithm that maintains the sets T(v) and X(v) explicitly. (It is obvious 
that the two versions are equivalent.) 
1: for all the edges e of the input stream do 
2: invoke Read-Edge{e) 
3: end for 



Algorithm 1 Procedure Read-Edge{e = {u,v)): the streaming algorithm for constructing a sparse 
(2t — l)-spanner. 

1: Let u be the vertex s.t. P{u) >- P{v) 

2: if P{u) is a selected label then 

3: P{v) ^ P{u) + n 

4: Sp{v) ^ Sp{v)U {e} 

5: else if B{P{u)) ^ M{v) then 

6: M{v) ^ M{v) U {B{P{u))} 

7: Sp{v) Sp{v) U {e} 

8: end if 
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The set T{v) (resp., X{v)) is the set of edges inserted into the set Sp{v) on hne 4 (resp., 7) of tlie 
Procedure Read_Edge. We will say that an edge e is inserted into T{v) (resp., X{v)) if it is inserted into 
Sp{v) on line 4 (resp., 7) of the algorithm. 

Note that the Procedure Read-Edge is extremely simple, and the only operations that might require 
a super-constant time are lines 5 and 6, which require testing a membership of an clement in a data 
structure, and an insertion of an clement into the data structure if it is not there already. These op- 
erations can be implemented very efficiently in a general scenario via a balanced search tree, or a hash 
table. Moreover, we will also show later that with high probability, the size of each table is quite small, 
specifically 0(n^/*), and thus, in our setting these operations can be implemented even more efficiently. 

3.2 The Size of the Spanner 

We start with showing that the resulting spanner is sparse. For this end we show that both sets U^eV ■^('^) 
and yj^^y X{v) are sparse. We start with arguing that the set Ui;ey ^(^) sparse. 

Lemma 3.2 For every vertex v , \T{y)\ <t — \. 

Proof: Each time an edge e = {v,u) is inserted into T{v), the label of v grows from P{v) to P{u) + n. 
Moreover, note that P{u) > P{v) for such an edge. Consequently, the level of P{v) grows at least by 1. 
Hence at any given time of an execution of the algorithm, L{P{v)) is an upper bound on the number of 
edges currently stored in T(v). Since L(P(v)) never grows beyond t — 1, it follows that |T(i;)| < t — 1. 
I 

Consequently, the set IJ,; T{v) contains at most n ■ {t — 1) edges, i.e., 

\[jT{v)\<n-{t-l). (1) 
vev 

We next argue that the set \^^^yX{v) is sparse as well. First, by Lemma 3.1, the number of distinct 
labels of level t — 1 that occur during the algorithm is, with high probability, 0{n^^* ■ {t ■ log n)^^^/*). Fix 
a vertex v E V. Since, by line 5 of Algorithm 1, for each such a label P at most one edge {u,v) with 
P{u) = P y Piv) is inserted into X{v), it follows that the number of edges {u,v) with P{u) >- P{v), 
L(P{u)) = t — 1, inserted into X{v), is, with high probability, at most 0{n^^^ ■ {t ■ logn)^~^/*). 

For an index i G [(t — 1)], let X^'^\v) denote the set of edges {u,v), with L{P{u)) < t — 1, inserted 
into X{v) during the period of time that L{P{v)) was equal to i. 

Lemma 3.3 X^*-'^\v) = 0. 

Proof: Suppose for contradiction that there exists an edge e = {v,u) € X^^^^^v). By definition of 
X^^~^\v), the label of v at the time when the algorithm read the edge e satisfied L{P{v)) = t — 1. 
Since e was inserted into X{v), it follows that P{u) >- P{v), where P{u) is the label of u at that time. 
Consequently, L{P{u)) = t — 1 as well. This is a contradiction to the definition if X^^~^\v). | 

We next show that the cardinalities of the sets X^'^\v), < i < t — 2, are small as well. (Though 
these sets may be not empty.) 

Lemma 3.4 For every input sequence of edges (ei, 62, • • • , em) determined obliviously of the coin tosses of 
the algorithm, for every vertex v , and index i G [(t— 2)], with high probability, |XW(u)| = O (n^/* ■ " 

Proof: The value L(P(v)) grows each time that the algorithm encounters an edge (u, v) with P{u) y P{v) 
and such that P{u) is a selected label. On the other hand, for a fixed index i £ [(t — 2)], during the time 
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period when the condition L(P(v)) = i holds, the size of the set X'^'^\v) is incremented each time the 
algorithm encounters an edge {u,v) with P{u) >- P{v), such that P{u) is not a selected label, and such 
that B{P{u)) does not belong to M{v). 

Fix an execution of the algorithm, and an index i, i G [{t — 2)]. Consider the sequence rj of all edges 
rj = {ei = {ui,v),e2 = {u2,v), . . . , = {uk,v)), for some integer A; > 0, that arrived during the time 
period when the condition L{P{v)) = i holds, and such that P{v) did not grow as a result of processing 
these edges. Let a = {Pi,P2, . . . ,Pk), Pj = P{uj), j € [k], be the sequence of labels of vertices Uj such 
that the edge {uj,v) appears in rj. Note that the edge ej = {uj,v) is inserted into X{v) only if the base 
value Bj of the label Pj appears in a for the first time. Moreover, the edge contributes to X^') (v) only if 
L{Pj) <t-l. 

Let a' = {Pji,Pj2i ■ ■ ■ jPje)i for some integer < i < k, he the subsequence of a that contains only 
labels Pj^ = P{ujg), g G [£], of level at most t — 2 such that no other label with the same base value 
appears in a with an index smaller than jq. It follows that = £. Moreover, all labels that appear 

in a' are not selected, as the algorithm increases L(P(v)) whenever it encounters an edge {uj,v) as above 
with a selected label P{uj). 

Since all labels of a' have distinct base values, and they are of level at most t — 2, each of these 
labels has a probability exactly p to be selected independently of other labels in the sequence. Hence the 
probability that i or more Tinselected labels of level t — 2 or less with distinct base values will appear in 
a row (with no selected label in-between them) is at most 



t ■ log n ^ 



n 



In other words, 



/ N l/t , 

For i = c log n • ( ^ j"^^ j for a sufficiently large value of c, this probability is at most ^ . 
Hence, with high probability. 

We are now ready to prove the desired upper bound on | IJ^^y -'^(^)l- 

Corollary 3.5 Under the assumption of Lemma 3.4, for every vertex v E V, with high probability, the 
overall number of edges inserted into X{v) is 0{v}/^ ■ {t ■ logri)^"^/*). 

Proof: By Lemma 3.4, with high probability, the number of edges {u,v) with L{P{u)) < t — 1 inserted 
into X{v) is at most 

t-2 

J2 = 0{n^l^ ■ {t ■ logn)^-V*) . 

i=0 

As was argued in the discussion preceding Lemma 3.4, the number of edges (v, u) with L(P(u)) = t — 1 
inserted into X{v) is, with high probability, 0{n^^^ ■ {t ■ logn)^^^/*) as well. | 

We summarize the size analysis of the spanner constructed by Algorithm 1 with the following corollary. 
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Corollary 3.6 Under the assumptions of Lemma 3.4, with high probability, the spanner H constructed 

by the algorithm contains 0(n^+-'^/* • (t • logn)^~^/*) edges. Moreover, each table M{v), v €z V, stores, 
with high probability, at most 0{n^/^ ■ {t ■ logn)^~^/*) values, and consequently, overall the algorithm uses 
0{\H\ ■ logn) = 0(ni+^/* • i^^V* . (logn)2-V*) hits of space. 

Proof: The resulting spanner is (Ui;ey ^(^) Ut;GV ■^i'^)) ■ -^^ inequality (1), | UijgV ^ ' ^ 

1). By Corollary 3.5, with high probability, | Ui;ev'^(''^)l ~ 0(ra^"'"^/* • {t ■ logn)^~^/*), and so the first 
assertion of the corollary follows. 

For the second assertion recall that a new value is added to M{v) only when a new edge (u, v) is 
introduced into the set X{y). By Corollary 3.5, with high probability, = 0(p}/*' ■ (t ■ logn)^~^/*), 

and therefore the same bound applies for |M(u)| as well. 

To calculate the overall size of the data structures used by the algorithms we note that 

|Um(^;)| < |U^(^)I < lU^(^)l + lU^(^)l = ^(1^1) = 0(ni+V*.(t.logn)i-V*) . 

v&/ vev vev v&v 

Since each label and edge requires O(logn) bits to represent, the desired upper bound on the size of the 
data structures follows. | 

3.3 The Stretch Guarantee of the Spanner 

We next show that the subgraph constructed by the algorithm is a {2t — l)-spanner of the original graph 
G. 

For an integer A; > 1, and a vertex v & V, let Pk{v) denote the label of v, P{v), before reading the 
feth edge of the input stream. 

Lemma 3.7 Let v,v' be a pair of vertices such that there exist positive integers k,k' > 1 such that 
B{Pk{v)) = B{Pki{v')). Then there exists a path of length at most L(Pk{v)) + L(Pk'{v')) between v and 
v' in the (final) set Ui,gv-^(^)- 

Proof: The proof is by induction of L{Pi^{v)) + L{Pk/{v')). The induction base is when L{Pj.{v)) = 
L{Pk'{v')) = 0. Hence B{Pk{v)) = B{Pk>{v')). It follows that Pk{v) = B{Pk{v)) = B{Pk>{v')) = Pk'{v'), 
and so I{v) = I{v'). Hence v = v', and the statement follows. (The path that starts and ends in v, and 
contains no other vertex is said to have length 0.) 

For the induction step we first observe that the only way for a vertex v to be labeled by a label of 
level greater than is by "borrowing" the label from a neighboring vertex (and incrementing its level). 

Since L{Pk{v)) + L{Pk'{v')) > 0, and L{Pk{v)), L{Pk'{v')) > 0, it follows that either L{Pk{v)) > or 
L{Pk'{v')) > 0. Suppose without loss of generality that L{Pk{v)) > 0. Let u be the vertex such that when 
the edge {u, v) was read, the vertex v adapted the label P{u)+n = Pk{v). Let k" be the time step on which 
this happened. It follows that on time step k" the edge {u, v) was inserted into T{v) (on line 4 of Algorithm 
1), and on this time step the label of u, Pk»{u), was equal to Pk{v) — n, and so L{Pk"{u)) = L{Pk{v)) — 1, 
and B{Pk,,{u)) = B{Pk{v)) = B{Pk>{v')). Hence L = L{Pk„{u)) + L{Pk,{v')) = L{Pk{v)) + L{Pk>W)) - 1, 
and so the induction hypothesis is applicable to the pair of vertices {u,v'}. Hence there exists a path of 
length L between u and v' in (J^gy ^('^)' ^.nd so there exists a path of length L + 1 = L{Pk{v)) + L{Pjfi{y')) 
connecting v and v' in the edge set IJt;Gy ^(^)- i 

The next lemma shows that the edge set H = Ut-gy vev ^('") is ^ (2* ~ l)-spanner. 

Lemma 3.8 Let e = {v,v') E E be an edge. Then there exists a path of length at most 2t — 1 between v 
and v' in the edge set H. 
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Proof: If there exist indices k,k' > 1 such that B{Pk{v)) = B{P]^i{v')) then by Lemma 3.7 there exists 
a path of length at most L{Pk{v)) + L{Pk'{v')) < 2t — 2 between v and v' in the spanner. 

Otherwise, consider the time step k, k > 1, of the execution of the algorithm on which the edge 
e = {v,v') was read. Let P = Pk{v), P' = Pk{v') be the labels of v and v', respectively, at time k. 
Siipposc without loss of generality that P' y P. If P' is a selected label, then the edge e was added to 
T{v), and so there exists a path of length 1 connecting v and v' in the spanner. 

Otherwise, consider the case that P' is not a selected label. Let Mk{v) (respectively, Xk{v)) denote 
the set M{v) (resp., X{v)) at time k. If B{P') ^ Mk{v) then the edge e = was added to X{v) 

(line 7 of Algorithm 1), and again the distance in the spanner between v and v' is equal to 1. 

We arc left with the case that the label of P', is not a selected label, and B{P') G Mk{v). In this 
case, by construction, there exists an edge («', v) € X{v) such that u' was labeled by P", B(P") = B{P'), 
at some earlier time k', k' < k. (This can be seen by a straightforward induction on the time moment 
k.) Hence, by Lemma 3.7, since B{Pk{v')) = B{Pk'{u')) = B{P'), there exists a path of length at most 
2t — 2 connecting the vertices v' and u' in the set Uuei/ ^(^)- Since {u',v) G X(^v), it follows that there 
exists a path of length at most 2t — 1 between v and v' in the spanner. | 

3.4 The Processing Time-per-edge 

To conclude the analysis of our streaming algorithm for constructing sparse spanners, we show that it has 
a very small processing time-per-edge. For this purpose we now fill in a few implementation details that 
have so far been unspecified. Specifically, on lines 5 and 6 of the Procedure Read-Edge the algorithm 
tests whether an element B belongs to a set A4{v), and if it does not, the algorithm inserts it there. 
The set M{v) is a subset of the universe [n], and by Corollary 3.6, its size is, with high probability, 
0{{t ■ logn)^~Vt . „Vt). Moreover, since \M{v)\ < \X{v)\, it follows that \M{v)\ < deg{v). 

Let N = c ■ {t ■ logn)^~^/^ ■ n^/*, for a sufficiently large constant c. (The probability that |M(t;)| < 
c- (t ■ \ogn)^~^^^ ■ n^/* for every vertex € V is at least 1 — j^^- Hence choosing c = 4 is sufficient.) As 
a part of preprocessing the algorithm computes a random hash function /i : [n] — > [A'^]. Specifically, for 
each number i G [n], the algorithm picks a value j G [N] uniformly at random, and sets h{i) = j. The 
table representation of this hash function is written down, and is used throughout the execution of the 
algorithm for the tables M{v) for all the vertices v £ V. This representation requires 0{n ■ logra) space, 
and can be computed in 0(n) time during the preprocessing. 

For every vertex v the algorithm maintains a hash table M{v) of size N. Every base value B for which 
the algorithm needs to test its membership in M{v) on line 5 of the Procedure Read -Edge is hashed to 
h{B) using the hash function h. To resolve collisions, for each entry of the hash table M{v) we use a 
dynamic dictionary data structure of Beame and Fich [18] (with the dynamization result of Andersson 
and Thorup [5]). This data structure maintains a dynamic set of q keys from an arbitrary universe 

using O ^Y^ io'giog "^) time per update (insertion or deletion) and membership queries. This completes the 
description of the implementation details of the algorithm. 

Note that the preprocessing of the algorithm requires 0{n) time. Wc next argue that implemented 
this way, the algorithm enjoys an extremely low processing time-per-edge. 

First, note that as with high probability |M(f)| < A'^, and each element of M{v) is hashed uniformly 
at random into one of the N entries of the hash table, it follows that the expected number of elements 
hashed into each specific entry of the hash table is 0(1), and thus the expected processing time-per-edge 
is 0(1). 

We next provide an upper bound on the processing time-per-edge that holds with high probability 
(rather than on expectation). We will use the following fact that can be easily verified using standard 
calculus. 
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Fact 3.9 For positive integers N,r,N>r>0, 



i^j <- c) <- m • 

We also need some additional definitions. For an execution ip of the algorithm, we say that a vertex v 
encounters the base value B during the execution if of the algorithm if there exists an edge e = {u,v) E E 
that satisfies (when it is read by the algorithm) that P{u) >- P{v), B{P{u)) = B, and P{u) is not selected. 

Fix a vertex v, and a specific entry j, j G [A^], in the hash table M{v). For every integer r, 1 < r < A^, 
let X{r) denote the event that at least r of the base values encountered by v during an execution of the 
algorithm are hashed into the entry j of M{v). We will analyze the probability of this event for every 
input graph and every ordering of the edges of the input graph. The probability space is determined by 
the coin tosses of the algorithm. Note that 

p(x,),.(iy. (:).(£)'. 

For a fixed vertex u, let Y{r) denote the event that there exists an entry in M{v) with at least r values 
hashed to this entry during an execution of the algorithm. By the union-bound, 

P{Y{r)) < N ■ {e/rf . 

Finally, let Z{r) denote the event that there exists a vertex and an entry j in its hash table M{v) 
with at least r values hashed to this entry during an execution of the algorithm. Using the union-bound 
again, we conclude that 

P(Z(r)) < n-N ■ {e/rf . 

Observe that this inequality holds for every (possibly chosen adversarially) input graph G and ordering 
p in which the algorithm reads the edges of G. 

Set r = c - iog°iog„ ) for a sufficiently large constant c. Since = o(n), it follows that with probability 
at least 1 — for every vertex v and every entry j of the hash table M{v), at most r values were 

hashed to this entry. 

Recall that the insert and query operations of the dynamic dictionary data structure of [18, 5] re- 
quire O iJ ^ time per operation. Hence, with high probability, this expression is bounded by 

O ■ (We use the notation log^*^ n, for an integer z > 0, to denote the i-iterated logarithm of 

n.) Let A(n) (respectively, a{n)) denote the function ^^jif^ (resp., ^i^^^)- 

We summarize the analysis of the processing time-per-edge of our streaming by the following corollary. 

Corollary 3.10 The processing time-per-edge of our algorithm is, with high probability, 0(A(n)). The 
expected processing time-per-edge is 0{1). 

We note also that for every edge e = {u,v) adjacent to a vertex v, at most one value B = B{P{u)) 
may be inserted into the set M{v). Thus, it is always true that |M(f)| < deg{v), and so it follows that 
the processing time of an edge e in our algorithm is always (with probability 1) at most 0{a{deg{e))). 

Remark: An improved data structure that supports insertion and membership queries would enable 
to improve the processing time-per-edge of our algorithm even further. (The data structure that we use 
supports also deletion, which is completely unnecessary for the streaming version of our algorithm.) 
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Remark: It is easy to verify that setting p = n in our algorithm guarantees the expected size of 
0(t-ni+V*) for the spanner, but shghtly increases the upper bound on the number of edges of the spanner 
that holds with high probability. The latter becomes 0{t ■ n^+^/^ ■ logn). 

The properties of our streaming algorithm are summarized in the following theorem. This theorem 
follows directly from Corollary 3.6, Lemma 3.8, and Corollary 3.10. 

Theorem 3.11 Let n,t, n > t > 1, be positive integers. Consider an execution of our algorithm in 
the streaming model on an input (unweighted undirected) n-vertex graph G = iy^E) such that both the 
graph and the ordering p of its edges are chosen by a non-adaptive adversary obliviously of the coin 
tosses of the algorithm. The algorithm constructs a {2t — \)-spanner H of the input graph. The expected 
size of the spanner is 0(t ■ n^"*"^/*) or the size of the spanner is 0{(t ■ logn)^~^/* • n^+^/*) with high 
probability ( depending on the choice of p; in the first case the guarantee on the size that holds with 
high probability is 0{t ■ logn • n^"*""^/*)^. The algorithm does so in one pass over the input stream, and 
requires 0(1) expected processing time- per- edge, 0(A(n)) processing time-per-edge with high probability, 
and 0{a{deg(e))) processing time-per-edge in the worst-case, for an edge e = (v,u). The space used by 
the algorithm is 0{\H\ ■ logn) = 0{t^~^^^ ■ log^~^^^ n ■ n^/*) bits with high probability. The preprocessing 
of the algorithm requires 0{n) time. 

Remark: Our algorithm can be easily adapted to construct a (2t— l)(l+e)-spanners for weighted graphs, 
for an arbitrary e > 0. The size of the obtained spanner becomes 0(log(i_|_g-) a) • {t ■ logn)^~^/* • n^"*"^/*), 
where u is the aspect ratio of the network. The algorithm still works in one pass, and has the same 
processing time-per-edge. This adaptation is achieved in a standard way (see, e.g., [24]), by constructing 
lo§(i+c) different spanners in parallel. For completeness, we next overview this adaptation. 

The edge weights can be scaled so that they are all greater or equal to 1 and smaller or equal to uj. 
All edges are partitioned logically into [log(]^_|_^) uj~\ categories, indexed i = 1,2, . . . , [log(]^_|_^) uj~\ , according 
to their weights, with the category i containing the edges with weights greater of equal to (1 -|- e)*~^ and 
smaller than (1 + e)*. When an edge e = {u,v) is read, it is processed according to its category, and it is 
either inserted into the spanner for the edges of category i, or discarded. 

Obviously, after reading all the edges, we end up with [log(i_|_g) a)] subgraphs, with the ith subgraph 
being a {2t — 1)(1 -|- e)-spanner for the edges of the category i. Consequently, the union of all these edges 
is a {2t— 1)(1 -|-e)-spanner for the entire graph. The cardinality of this union is at most [log^^^j) a)] times 
the maximum cardinality of one of these subgraphs, which is, in turn, at most 0{{t ■ logn)^~^/* • n^"*"^/*) 
with high probability. 

4 A Centralized Dynamic Algorithm 

Our streaming algorithm can be seen as an incremental dynamic algorithm for maintaining a (2t — 1)- 
spanner of size 0((t-logn)^~^/*-n^"'"^/*) for unweighted graphs, where n is an upper bound on the number 
of vertices that are allowed to appear in the graph. 

The initialization of the algorithm is as follows. Given a graph G = {y,E), we run our streaming 
algorithm with the edge set E, where the order in which the edge set is read is arbitrary. As a result, the 
spanner, and the satellite data structures {M{v), Sp{v) \ v G V} are constructed. This requires 0(|-E|) 
expected time, 0{\E\ ■ A(n)) time with high probability, and 0(\E\ ■ a(A)) in the worst-case, where A is 
the maximum degree of a vertex in G. 

Each edge that is added to the graph is processed using our streaming algorithm. The spanner and 
the satellite data structures are updated in expected 0(1) time-per-edge, 0(A(n)) time-per-edge with 
high probability, and 0(cr(A)) time in the worst-case. 



15 



We next make the algorithm robust to decremental updates as well. Note that for an edge e = (?;, u) 
to become a T-edge (an edge of IJiieV '^i-^))^ must hold that at the time that the algorithm reads the 
edge, the greater of the two labels P{u) and P{v) (with respect to the order relation >-) is selected. The 

probability of a label to be selected is at most p = if its level is smaller than t ~ 1, and is 

otherwise. Hence the probability of e to become a T-edge is at most p. 

In Section 8.3.5 (right after Corollary 8.17) we will show that a crash of an edge e = {v,u) that does 
not belong to UxgV^(-^) '"^^ processed in expected time 0(1). Moreover, with high probability the 
processing of such a crash requires (T{h) time, where h = max{de(/(e), log n}. Since the entire spanner 
can be recomputed in expected time 0{\E\) by our algorithm, it follows that the expected decremental 
update time of our algorithm is 0{^^ ■ (t ■ logn)^/*). The size of the data structure maintained by the 
incremental variant of the algorithm is 0(t^~^/* • (log n)^~^/* -n^+^Z*) bits, and the fully dynamic algorithm 
maintains a data structure of size 0(|i?| • logn). 

We summarize this discussion with a following corollary. 

Corollary 4.1 For positive integer n,t, n > t > 1, the algorithm is a fully dynamic algorithm for 
maintaining {2t — l)-spanners with expected 0{t ■ n^+^/*) number of edges (or 0((tlogn)^~^/* • n^"^^/*) 
edges with high probability, depending on the choice ofp) for graphs with at most n vertices. If G = iy, E) 
is the initial graph, then the initialization of the algorithm requires 0{\E\) expected time, 0{\E\ ■ A(n)) 
time with high probability, and 0{\E\ ■ cr(A)) in the worst-case. The expected incremental update time of 
the algorithm is 0{1), with high probability it is 0(A(n)), and in the worst-case it is 0{a{deg{e))) (for 

an edge e that joins the graph). The expected decremental update time is 0(-^ • (t ■ logn)^/*), and with 

\i/t 

probability at least 1 — I ' j the decremental update time is 0{a{h)), where h = maK{deg{e), log n}. 

To our knowledge, this is the first fully dynamic algorithm for maintaining sparse spanners for a 
wide range of values of the stretch parameter t with non-trivial guarantees on both the incremental and 
decremental update times. (Ausillo et al. [6] devised such an algorithm for 3- and 5-spanners.) 

Using Corollary 4.1 in conjunction with the dynamic All-Pairs- Almost-Shortest-Paths (henceforth, 
APASP) algorithm of Roditty and Zwick [34] we obtain tradeoffs for the incremental APASP problem 
that are advantageous for a certain range of parameters. Specifically, we use the following result. 

Theorem 4.2 [34] For every e,S > 0, and z < m^^'^~^ , there exists a fully dynamic (1 -\- e) -approximate 
APASP algorithm with an amortized update time 0{\E\n/z), and query time 0{z). 

Consequently, by maintaining an incremental (2t — l)-spanner with 0(n^"*'^/*) edges, and maintaining 
the dynamic data structure of [34] computed for the maintained spanner, we obtain the following result. 

Theorem 4.3 For every e,d > 0, positive integer t > 1, and z < nz^^+^Z*')"'', there exists a fully dynamic 
{2t — 1)(1 -|- e)- approximate APASP algorithm for unweighted undirected n-vertex graphs with amortized 
expected update time of O ^lifii^l -)_ . (^ . logn)^/*^, and query time at most 0{z). 

Note that when choosing z = ui{n^/^), this algorithm has a sublinear amortized update time in terms 
of the number of edges even when the number of edges m = 0(n^). To our knowledge, this is the first 
dynamic APASP algorithm that achieves an amortized update of o(n^) for all graphs with a non-trivial 
query time is non-trivial {z = n^/^~^^, > is a constant). 
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5 The Static Distributed Algorithm 



In this section we present and analyze a static synchronous distributed algorithm for constructing (2t — 1)- 
spanners with 0{{t ■ logn)^~^/* • n^+^/*) edges. The running time of our algorithm is 2t rounds or time 

units depending on whether the setting is synchronous or asynchronous, respectively. The algorithm is 
extremely simple, and is, consequently, very well suitable for ad-hoc or sensor networks in which the 
processors possess only very limited computational resources. 

For simplicity we assume that every vertex v has a unique identifier I{v) G [n]. If this is not the 
case, each vertex v can pick its I{v) uniformly at random from the set [n^]. With probability at least 
(1 — 1/n^) the identifiers will be all distinct. The fact that the range of the identifiers becomes instead 
of [n] would necessitate only minor straightforward changes to the algorithm and its analysis. 

5.1 The Algorithm 

Like in the streaming version of the algorithm, each vertex v maintains the variables I{v), P{v), r{v), Sp{v) 
and M[v), that have the same functionality as in the centralized algorithm. Also, as in the centralized 
setting, each set Sp{v) is logically partitioned into the set T{v) and X{v), where T(v) (respectively, X{v)) 
is the set of the tree (resp., cross) edges of the algorithm. 

In addition, each vertex v maintains a variable ttl{v), standing for the "time-to-live", which reflects 
the maximum distance to which the current label of v, P{v), is allowed to propagate. Initially, ttl{v) is 
set to r{v). However, later when the vertex v adapts a label of one of its neighbors n, the value of ttl{v) 
becomes equal to ttl{u) — 1, reflecting the requirement that the label of u is not allowed to propagate 
beyond radius ttl{u). 

The initial value of r{v) is set according to the same truncated geometric distribution as in the 
centralized version of the algorithm. As before, we assume that the number of vertices n, or at least an 
upper bound on n, is known to all the vertices prior to the beginning of the execution. The order relation 
>- between the labels of labels P{v) of different vertices is defined exactly as in Section 3.1. 

We next describe the algorithm itself. The vertex v that runs the algorithm invokes the Procedure 
Round for 2t rounds in a row. During these rounds it computes its set Sp{v) which is the output of the 
algorithm. In other words, IJy^y Sp{v) is the sparse spanner returned by the algorithm. Note that the 
Procedure Round accepts no input parameters, and consequently, it runs in the same way on every round 
of the algorithm. In addition, there is just one possible type of messages that can be sent by vertices 
that run the algorithm. (These are messages {P{v), ttl{v)), where v is the sender of the message.) This 
uniformity of the algorithm makes it extremely robust to dynamic changes of the networks, as we will 
see in Sections 6, 8 and 9. 

The Procedure Round is very similar to the streaming algorithm from the Section 3 (the Procedure 
Read_Edge). The most significant difference is that while the Procedure Read_Edge processes one single 
edge, the Procedure Round processes the set of edges adjacent to a particular vertex. However, the 
Procedure Round can be seen as, essentially, invoking the Procedure Read-Edge on all the edges adjacent 
to V, sequentially, one after another, in an arbitrary order. 

We remark that the Procedure Round goes over all the messages received on the previous round, and 
for each message {P{u), ttl{u)), reads the edge (v, u). Observe that on round 1 there are still no messages 
received, and thus the only processing done on this round is sending out the messages {P{v), ttl{v)) on 
line 9. 

The formal description of the algorithm follows. 

for rounds 1, 2 . . . , 2i do 

Invoke Procedure Round 
end for 
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Algorithm 2 A distributed static synchronous algorithm for constructing a sparse {2t — l)-spanner 
(Procedure Round). The pseudo-code is for a fixed vertex v (^V. 

1: Go over all received messages in an abitrary order and do 

2: while 3 message {P{u), ttl{u)) with P{u) y P{v) do 

3: if {Ul{u) > 0) then 

4: P{v) ^ P{u) + n; Ul{v) ^ ttl{u) - 1; Sp{v) ^ Sp{v) U {e} 
5: else if B{P{u)) ^ M{v) then 

6: M{v) ^ M{v) U {B{P{u))}; Sp{v) ^ Sp{v) U {e} 
7: end if 
8: end while 

9: Send to all your neighbors the message {P{v), ttl{y)) 



5.2 The Size of the Spanner 

We first introduce a few definitions. We say that an edge e = {w^w') ^ E \s scanned by the algorithm if 
at some point of the execution, either the algorithm run by w (meaning that v = w) substitutes u = w' 
and passes the condition of the while loop (and gets into the loop) , or the algorithm run by w' (meaning 
that V = w') does the same with u = w'. In the former (respectively, latter) case we say that the edge is 
scanned by w (resp., w'). We say that a vertex v reads an edge e = (v, v') on round j, if either the vertex 
V scans it on round j or if it discovers that P{v') -< P{v) (and thus does not scan it). In Algorithm 2 
every vertex v reads all edges that are adjacent to it on every round of the algorithm. 

Obviously, no edge is scanned (or read) on round 1, because the first messages arrive on round 2. 
Interestingly, due to the distributed nature of our algorithm, it may happen that on a certain round i, 
i G {2,3,..., 2t}, the edge e = {w, w') is scanned neither by the vertex w nor by by w' . We will soon 
describe a possible scenario of this kind, but first we need the following simple observation. 

Let Pi{w) be the label of w in the beginning of the round i. Note that w had the same label on line 
9 of its execution of the Procedure Round on round i — I, and consequently, the label of w known to 
w' at the beginning of the round i is precisely Pi (w) . Symmetrically, the label of w' known to w at the 
beginning of the round i is Pi{w'). 

One scenario in which an edge e = (ii;, w') is scanned neither by w nor by w' on a round i, i >2, is 
the following one. Suppose that Pi{w) >- Pi{w'), and so based on the message that w received from w' on 
round i, the vertex w decides that w' is in charge of this edge. However, w' starts with scanning another 
edge e' = {w',u), and scanning e' increases the label of w' to P{u) + n >- P{w), and when w' gets to 
consider the edge e = {w,w') it discovers that Pi{w) is smaller than its current label, and decides to skip 
e. 

Lemma 5.1 It is impossible for an edge e = {w,w') to be scanned by both its endpoints on the same 
round i. 

Proof: Consider the time moment when the vertex w scans the edge e on round i. Let P{w) be the label 
of the vertex w at this moment. Then P{w) -< Pi{w'). Note, however, that Pi{w) :< P{w). Moreover, 
the label of w' , P{w'), is greater or equal than Pi{w') at any moment of the execution on round i. In 
other words, P(w') ^ Pi{w') >- P{w) y Pi{w), and thus the vertex w' cannot possibly scan the edge e on 
round i. | 

We next argue that the level of a vertex is at most t — 1. 

For the sake of the following lemma we assume that the line 4 of the algorithm is executed as an 
atomic operation. (This assumption is not necessary for the lemma to hold, and we will later indicate 
how to get rid of it.) 
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Lemma 5.2 For every vertex v , and for every moment of the execution of the algorithm after the 
variables P{y) and ttl{y) were initialized, 

L{P{v)) + ttl{v) = riz) , (2) 

where z = z{P{v)) is the base vertex of the label P{v), and r{z) is the radius chosen by the vertex z. 

Proof: For a vertex the variables P{v) and ttl{v) are local to and hence only the vertex v has 
access to them. Hence these variables change sequentially, and so, there exists a sequence of discrete time 
moments ji, j2, • • • such that these variables change at moments ji, j2, . . .. (The time moment when P{v) 
and ttl{v) were initialized is not included in this sequence.) 

Order all the time moments \jiiy) \ v G V,i = 1,2, . . .} as a monotonely increasing sequence ii < 
£2 < • • ., and let Iq be a time moment smalller than li at which all the variables P{v) and ttl{v), for 
all V & V, were already initialized. Note that for a fixed moment ii, it may happen that more than one 
vertex v changes its variables P{v) and ttl{v) at time 4. 

We now prove by induction on i = 0, 1, . . . that at time £ G every vertex v £ V satisfies 

the equation (2), where z = z{P{v)) is the base vertex of the label P{v). 

The induction base holds because each each P(v) is initialized as I{v), and ttl(v) is initialized as r(v), 
and so L{P{v)) = 0. Since z{P{v)) = z{I{v)) = v, it follows that r{z{P{v))) = r{v) = L{P{v)) + ttl{v), 
and we arc done. 

For the induction step, suppose that for some i = 0,1, . . ., during the time interval for every 

vertex v & V, the equation (2) holds. Let vi,V2, ■ ■ ■ ,Vk, for some integer k > 1, he the vertices that 
change its labels at time Let ui,U2, ■ ■ ■ ,Uk be the (not necessarily distinct) vertices such that the 

label P{vj) of Vj is set to P{uj) + n, for j G [k]. 

Let P{x) and ttl{x) (respectively, P'{x) and ttl'{x)) denote the label and the ttl of the vertex x before 
(resp., after) the time moment ii+i, respectively. It follows that P'{vj) = P(uj)+n, and ttl'{vj) = ttl{uj) — 
1, for every j G [k]. Hence L{P'{vj)) = L{P{uj)) + 1, and so L{P'{vj)) + ttl'{vj) = L{P{uj)) + ttl{uj) = 
r{z{P{uj))), for every j G [k]. Moreover, as P'{vj) = P{uj) + n, it follows that z{P'{vj)) = z{P{uj)), 
and so L{P'{vj)) + ttl'{vj) = r{z{P'{vj))), for every j G [k], proving the lemma. | 

By lines 3-4 of Algorithm 2, and by definition of the radii r{v) of vertices v, for every vertex v, the 
variable ttl(v) is always non-negative, and r{v) <t — l. Hence, it follows that for every vertex v, L{P{v)) 
is always at most t — 1. We remark that there is no need for the line 4 to be executed as an atomic 
operation for arguing that the levels of vertex labels are never greater than t — l. If this line is not executed 
as an atomic operation, then after the first instruction of the line 4 and before the second instruction 
of this line it holds for a short period of time that L{P{v)) + ttl{v) = r{z{P(v))) + 1. However, at this 
point ttl{v) > 1, and so L{P{v)) is never greater than r{z{P{v))), and we are done. We summarize this 
discussion by the following lemma. 

Lemma 5.3 For every vertex v, L{P{v)) is always at most t — l. 

Intuitively, if a vertex v scans an edge e adjacent to v it means that the edge is treated by the algorithm 
exactly in the same way as it would have been treated by our streaming algorithm. Consequently, if we 
show that ultimately all the edges of the graph axe scanned, we can then use the analysis of our streaming 
algorithm to derive the correctness of the distributed version of our algorithm. 

Lemma 5.4 For every edge e = (w, w') G E, the edge e is scanned at some point of the execution of the 
algorithm. 



19 



Proof: The edge e is read (2t — 1) times by the vertex w, and {2t — 1) times by the vertex w' . (Once for 
each round i S {2,3,..., 2t} of the algorithm.) Recall that each time a level of a label grows, it grows at 
least by 1, and that initially all vertices have labels of level 0. Moreover, by Lemma 5.3, no label ever 
reaches a higher level than t — 1. Consequently, it may happen that the level of w grows on at most t — 1 
different rounds, and the same is true for w'. Since altogether the algorithm runs for 2t rounds, it follows 
that there is necessarily a round j, j G {2, 3, . . . , 2t}, on which neither the level of w nor the level of w' 
grows. 

Observe that whenever a label of a vertex grows, the level of the label grows as well, and thus neither 
the label of w nor the label of w' grows on round j, respectively. Let P{w) = Pj{w) and P{w') = Pj{w') 
be the values of the labels of w and w' in the beginning of the round j, respectively. If P{w) >- P{w') 
then the algorithm run by w' will discover this during the execution of the while loop on round j, because 
it received P{w) in a message from w sent on round j — 1, and P{w') does not change during the round 
j. Hence in this case the vertex w' scans the edge e on round j. 

Symmetrically, if P{w') >~ P{w) then the vertex w scans the edge e on round j. | 

We next note that Lemma 3.2 holds for the distributed version of our algorithm as well. 
Lemma 5.5 For every vertex v eV, \T{v)\ <t — 1. 

Proof: Fix a vertex v &V. By exactly the same argument as in the proof of Lemma 3.2, < L{P{v)). 

The lemma now follows from Lemma 5.3. | 

Hence the inequality (1) holds for the distributed algorithm as well. 

For a label n- {t — \) +i oi level t — 1 to occur, it must hold that r{u) = f — 1 for the vertex u such 
that I{u) = i. The probability of this event is Hence Lemma 3.1 keeps holding too. 

Fix a vertex v . Exactly as in the analysis of the streaming algorithm, for every label P of level 
t — 1 that occurs during the algorithm, at most one edge (w, v) with P = P{u) >- P{v) is inserted into 
X{v). Hence, with high probability, at most 0{n^/^ ■ {t ■ logn)^"^/*) edges {u,v) with P{u) y P{v), 
L[P{u)) = t — 1, are inserted into the set X{v). 

The sets i G [{t-1)], are defined as in the Section 3.2, and X^* = 0, by the same argument. 

We next show that the sets X^'^\v), i <t — 2, also have small cardinality. 

Lemma 5.6 For every vertex v E V, and index i E [{t — 2)], with high probability, 

=o(n'"-5^^) . (3) 

Proof: The value of L{P{v)) grows each time an edge {u,v) with P{u) >- P{v), and such that P{u) is 
a selected label, is scanned by the vertex v. Fix an index i e [{t — 2)]. During the time period that 
L{P{v)) = i, the value \X^'^ {v)\ is incremented every time an edge {u,v) with P{u) >- P{v), such that 
P{u) is not selected, B{P{u)) M{v), and L{P{u)) < t — 2, is scanned by v. 

Similarly to the proof of Lemma 3.4, we consider the sequence rj = [ei = (ui,v), . . . ,6^ = {uk,v)) 
of edges that were scanned by v during the time period that L{P{y)) = i, and such that P{v) did not 
grow as a result of processing these edges. The sequences a = (Pi, . . . Pj = P{uj), j G [k], and 

a' = {Pj^ , , . . . , Pjf), for an integer I, Q < ^ < k, are defined as in the proof of Lemma 3.4. It is easy 
to verify that the equality |X(*)(ti)| = I holds. 

Since L{Pj^) < t — 1, for every Pj- G a', and since a label of level at most t — 2 has a probability of 

p = ( j to be selected independently of all other labels, it follows that the probability that £ or more 
not selected labels with distinct base values will appear in a row, with no selected labels in-between, is 
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at most (1 —p) . The inequality (3) follows now by exactly the same argument as in the proof of Lemma 
3.4. I 

Hence Corollaries 3.5 and 3.6 hold for the distributed version of our algorithm as well. 

5.3 The Stretch Guarantee 

In this section we argue that the subgraph constructed by the algorithm is indeed a {2t — l)-spanner of 
the input graph. We do it by showing that once the algorithm scans an edge e = {w,w') (that is, either 
the vertex w scans it or the vertex w' does), the spanner guarantees a stretch of at most {2t — 1) for the 
edge. 

Note that in our algorithm every vertex v on every round i reads all edges adjacent to v. For a fixed 
vertex v and round i, let (ei, 62, . . . , 6^63(1))) be the sequence of edges adjacent to v read by v on round i. 
(In other words, the vertex v read first the edge ei, then 62, etc., and e^eg(u) the last edge read by v 
on this round.) Let Pij{v) be the value of the label P{v) of the vertex v on round i before it reads the 
edge Cj. Let Tij{v) denote the value of the set T{v) at the same time moment. 

For a pair of vertices v, v' G V, and a pair of indices i, i' of rounds, and a pair of indices j, j', we write 
{v,i,j} :< {v',i',j'} if the time moment on which the vertex v reads its jth adjacent edge on round i 
precedes or equal to the time moment on which the vertex v' reads its {j')th. adjacent edge on round i'. 
Let T{v, i,j} denote the value of the set T = IJuey ^('") the time moment {v, i,j}. 

Lemma 5.7 For a pair of vertices v,v' G V, if there exist indices i,j,i',j' such that B(Pij(v)) = 
B{Piijr(v')), then the set IJ^i^yT^v) contains a path of length L{Pij(v)) + -L(Pj/j/(v')). Moreover, if 
{v,i,j} d: {v',i',j'} then the set T{v' ,i' , j'} contains such a path. 

The proof of this lemma is identical to the proof of Lemma 3.7. 

Let Hi denote the set of edges present in the spanner (that is, in the set (Jtjey Sp{v)) at the beginning 
of the round i, i = 1,2, 

Lemma 5.8 Consider an edge e = {w,w') that was scanned by the algorithm on round i, i > 2. Then 
for every i' , i' > i + 1, H^/ spans the edge e. 

Proof: Suppose without loss of generality that the edge was scanned by the vertex w. Let P{w') be the 
label of w' that the vertex w received from w' just before the round i started. Then, by definition, it 
follows that w substituted v = w, u = w', and discovered that P(v) = P(w) -< P{w') = P{u). If P{w') 
is a selected label then the edge e was inserted into the set T{w), and we are done. Otherwise, if P{w') 
is not a selected label. 

Let M{w) denote the value of the set M{w) at the moment that w starts scanning the edge e. If 
B{P{w')) M(w) then the edge e = (w,w') was inserted into the set X{w), and again we are done. 
Finally, if B{P{w')) G M{w) the the assertion of the lemma follows using Lemma 5.7, and the proof 
argument of Lemma 3.8. | 

Lemmas 5.4 and 5.8 imply that the algorithm constructs a {2t — l)-spanner of its input graph. 

5.4 Local Processing 

It is a common assumption that all local computations can be done in zero time in the distributed 
setting. Under this assumption one needs not to bother himself with the specific implementation of 
the data structure M{v). However, if we do want an algorithm that is also efficient in terms of local 
computation, we can use the dynamic dictionary data structure of Dietzfilbinger et al. [20] . This dynamic 
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dictionary guarantees an amortized expected time of 0(1) per edge, and an overall expected 0{deg{v)) 
processing time-per-round, if deg{v) is sufficiently large. 

Recall that the data structure of Beame and Fich with the dynamization technique of Andersson 
and Thorup [18, 5] maintains a dynamic set with q keys from an arbitrary universe using 0{a{q)) = 

O iJ iog°iog q ) per update or membership query. Using this data structure we obtain a worst-case 



processing time-per-edge of 0{a{deg{v))), and processing time-per-edge of O (^^J iog(iog°iogn+(iogL^^^^^ "^^^^ 
high probability. We denote the latter expression by 



I log log n + (log n)/t 
log(log log n + (log n) / 1) 



For the first (respectively, second) bound we argue that |M('u)| < deg{v) (resp., |M(v)| = 0{p}^* ■ {t ■ 
logn)^~^/*)) for every vertex v V. The second bound follows from Lemma 5.6, and since |M(w)| < 
|X(t;)| for every vertex v. For the first bound we need to guarantee that no edge is scanned more than 
once by the same vertex. One can do it if each vertex v maintains a bit flag for each edge e adjacent to v 
indicating whether v has already scanned e or not. Note also that if we do allow a vertex to scan an edge 
more than once than still |M(t;)| < 2t- deg{v), because v can scan each of the adjacent to it edges at most 
once per round, and the algorithm runs for at most 2t rounds. Consequently, the worst-case processing 
time-per-edge will be only slightly higher, specifically, 0{a{t ■ deg{v))). 

Finally, since |M(i;)| < deg{v), and [-^^(w)! < deg{v), and since each edge and label can be represented 
with O(logn) bits, it follows that each vertex v uses space of 0{deg{v) ■ logn). Since a vertex needs 
always to maintain at least one bit for each edge adjacent to it, this space requirement is optimal up to 
a logarithmic factor. 

We need some additional notation. For a fixed graph G = {V,E), a vertex v e V, and a round i, 
let Q{v, i) be the subset of edges adjacent to v that are read by v on round i, and let p{v, i) denote the 
ordering of Q{v,i) that determines the order in which the vertex v reads the edges of the set Q{v,i). 

We summarize this section with the following theorem. 

Theorem 5.9 Let n,J, n > t > \, he positive integers. Consider an execution of our algorithm in 
the distributed synchronous static model on an input (unweighted undirected) n-vertex graph G = {V,E) 
such that the graph and the orderings p{v,i), for every vertex v E V and round i € [2t], are chosen 
by a non- adaptive adversary obliviously of the coin tosses of the algorithm. The algorithm constructs a 
(2t — \)-spanner of the input graph. The expected size of the spanner is 0{t ■ or the size of the 

spanner is 0{(t ■ logra)^"^/* • ra^"'"^/*) with high probability (depending on the choice of p, see Theorem 
3.11). The running time of the algorithm is at most 2t rounds, its message complexity is 0{t ■ \E\). Also, 
each vertex v uses 0{deg{v) ■ logn) bits of space. Moreover, the local processing time-per-edge of each 
vertex v running the algorithm, on each round is expected 0{1), worst-case 0{a{deg{v))), and 0(x(n, f)) 
with high probability. The algorithm uses only messages of size O(logn). 



6 A Distributed Incremental Algorithm 

We next show that the distributed static algorithm of Section 5 can be adapted in a very simple way to 
the distributed dynamic incremental environment, that is, to a network in which some edges may appear 
spontaneously, but no existing edge ever crashes. 
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6.1 The algorithm 



The static algorithm of Section 5 can be seen in the following way. Each vertex v maintains a local counter 
variable ctr{v) which is initialized to 1. As long as the counter is no greater than 2t, the algorithm invokes 

the Procedure Round. 

To handle incremental topology updates (appearances of new edges) we introduce into the algorithm 
the following changes. First, it will now run forever, and invoke the Procedure Round as long as the 
variable ctr{v) is no greater than 2t. It will also increment the value of ctr{y) after each invocation of the 
procedure. In addition, once a vertex v detects a topology update (an appearance of a new edge adjacent 
to v) it will reset the value of ctr{v) (set it to 1). The latter will make v to invoke the Procedure Round 
for 2t additional times, regardless of the number of times v invoked the procedure before the topology 
update was detected. 

The formal description of the incremental algorithm follows. 

Algorithm 3 A distributed incremental synchronous algorithm for constructing a sparse (2i— l)-spanner. 

The pseudo-code is for a fixed vertex v eV. 

1: ctr{v) ^ 1 

2: On every round do (lines 3-9 in an infinite loop) 

3: if some edge e = {v,z) appeared on previous round then 

4: ctr{v) <— 1 

5: end if 

6: if {ctr{v) < 2t) then 
7: Invoke Procedure Round 
8: ctr{v) <— ctr{v) + 1 
9: end if 



6.2 The analysis 

In the context of dynamic distributed algorithms it is a common practice to consider the following scenario. 
Suppose that all the topology updates occur before a certain round R, and starting from the round R 
the network becomes stable. At a certain later round R', R' > R, the algorithm stabilizes and produces 
the correct output with respect to the last (stable) topology of the network. The number of rounds 
R' — R that elapse between the last topology update and the first time when the output of the algorithm 
becomes correct is called the quiescence time of the algorithm. Particularly, this is the efficiency measure 
considered in [11]. 

Our result is, however, significantly stronger. Not only that we show that the quiescence time of our 
algorithm is at most 2t, but rather that if an edge e appears on certain round R, within 2t rounds after 
that event the spanner maintained by the algorithm will already adapt to guarantee the stretch of {2t— 1) 
for the edge e, even if many other (incremental) topology updates occurred in the meanwhile. Moreover, 
we show that the same statement holds true even if many edges showed up in the network at the same 
time as the edge e did. 

For an edge e = {w, w'), let the treatment time of e be the duration of the time period (in terms of the 
number of rounds for the synchronous environment, and in terms of the time units for the asynchronous 
one) that elapses between the moment that e shows up in the network, and the moment that the spanner 
maintained by the algorithm starts to span the edge (that is, to provide a stretch guarantee of 2t — 1 
for it). We note that in our algorithm for the incremental environment edges are never deleted from the 
spanner, and so once it starts to span a certain edge, it will keep doing so forever. We will show that the 
worst-case treatment time of every edge in our algorithm is at most 2t. 



23 



We start with arguing that every edge e = {w,w') is scanned by the algoritlim within 2t rounds after 
it shows up in the network. Suppose that e appears on round R. Tlien at the beginning of the round 
R + 1 both w and w' reset their counters ctr{w) and ctr{w'), respectively, and read this edge for the 2t 
following rounds. (We assume here that both endpoints detect occurrence of the edge that connects them 
simultaneously.) Hence, by the same argument as in the proof of Lemma 5.4, the edge e is scanned on 
round R + 2t or earlier. 

It is easy to see that Lemma 5.8 keeps holding, that is, if an edge is scanned by the algorithm on 
round i, the spanner starts to span the edge starting with the end of this round. Finally, assuming that 
the graph G = {V,E), and the sequence of edge sets added to G on different rounds is determined by a 
non-adaptive adversary, obliviously of the random coin tosses of the algorithm, the same argument as we 
used for proving Lemma 5.5 and Lemma 5.6 shows that the size of the spanner is 0{{t ■ logn)^~^/* • n^/*) 
with high probability. 

We summarize this discussion with the following theorem. 

Theorem 6.1 For n,t, n > t > 1, and an adversary as in Theorem 5.9, Algorithm 3 maintains a 
dynamic {2t — l)-spanner of an input n-vertex graph in a distributed incremental environment. This 
spanner contains 0{{t ■ logn)^~^/* • n-*" edges with high probability. The treatment time of an edge 
in the algorithm is at most 2t. The space requirements, and the local processing time-per-edge of the 
algorithm are listed in Theorem 5.9. (The notation deg{v) means here the maximum degree of the vertex 
V at some point of the execution.) 

6.3 Extensions of the Incremental Distributed Algorithm 

In this section we strengthen Theorem 6.1 further, and show that by introducing some minor changes to 
the algorithm one can guarantee that the treatment time decreases drastically if we restrict the sequence 
of topology updates to a certain convenient structure. In particular, we show that if the set of edges 
added on each round forms a partial matching, then the treatment time becomes one single round. 

The modification that we introduce to the algorithm is based on the observation that once an edge 
e = (f , v') is scanned, there is no need to scan it again, as long as the network experiences only incremental 
updates. This observation follows from Lemma 5.8. So it makes sense for a vertex v to maintain an array 
of bit flags Scanned -Edges{v) with an entry for every edge adjacent to v. These flags are all initialized 
as 0, and once v learns that e = {v,v') was scanned it marks the corresponding entry of the array 
Scanned _Edges{v) by 1, and never reads this edge again. A vertex v can learn that an edge e = {v,v') 
was scanned in one of the two ways. Either it scans it itself, or it was scanned by the other endpoint v' , 
and V receives a message from v' indicating it. So on line 17 of the Procedure Read-Edge (see Algorithm 
2), the vertex v will send the message {P{v), ttl[v)) to each of its neighbors u such that the edge {v,u) 
is not scanned (to the best of the knowledge of v), and will send the message SCANNED to each vertex 
v' such that the edge {v,v') was just scanned by v. The vertex v' marks the corresponding entry of its 
Scanned -Edges{v') array upon receival of the message SCANNED. We will refer to this modified version 
of Algorithm 3 as Algorithm Sync_Incr. 

We assume that the network is stable before the first round, meaning that all edges already present 
in the network were scanned by the algorithm before the first round. Note that this assumption is not 
needed for Theorem 6.1 to hold. 

In other words, we consider the scenario in which our distributed algorithm worked for 2t rounds in 
a static network, terminated and produced the spanner with the desired properties and the appropriate 
satellite data structures P{v), M(v), Sp{v), for every vertex v. After this happenned, the network kept 
running the algorithm. In other words, each vertex v waits for updates, re-sets the counter ctr{v) once 
it detects an update, and starts executing the algorithm again. 
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Let Fi,F2,. . . be a sequence of edge sets, where Ei is the set of edges that appear in the graph on 
round i, i = 1,2, . . .. Suppose that each set Fi is a partial matching, that is, each vertex v has degree at 
most 1 in each Fj. (Particularly, some sets F^ may be empty.) Suppose also that the network is stable 
at the beginning of round 1. We show that in this case the treatment time of our modified algorithm is 
one. that is, for every i = 1,2,..., and e G F^, the spanner H^^i spans e. 

This result is a consequence of the following lemma. 

Lemma 6.2 For every i = 1,2, . . . , and edge e G F^, the edge e = {w, w') is scanned on round i. 

Proof: The proof is by induction on z = 1,2, . . .. The induction claim is that before the round i starts 
(but after the round i — 1 ends), the network is stable, and all the edges of U}=i were already scanned, 
and, moreover, for each index j = 1,2, . . . ,i — 1, and every edge e G Fj, the edge e was scanned on round 
j- 

The induction base holds vacuously. For the induction step suppose that the statement holds for some 
integer i, i > 1, and consider an edge e = {w,w') G -Fj+i. Let P{w) (respectively, P{w')) be the label 
of the vertex w (resp., w') at the beginning of the round i + 1. Suppose without loss of generality that 
P{w) -< P{w'). By induction hypothesis and since -Fj+i is a partial matching, all the edges adjacent to w 
but the edge e were already scanned. Consequently, the vertex w will start the round i + 1 with reading 
the edge e. Then it will discover that P{w) ~< P{w'), and scan the edge. | 

By Lemma 5.8, once an edge is scanned, the spanner starts to span it. We summarize this extension 
of Theorem 6.1 with the following corollary. 

Corollary 6.3 For n,t, n > t > 1, consider an execution of the Algorithm Syncdncr on an input n- 
vertex graph G. Suppose that before the beginning of round 1 the network maintains a {2t— l)-spanner H 
constructed by the Algorithm Syncdncr, and the network is stable. Let Fi,F2, ... be a sequence of edge 
sets, with Fi being the set of edges that show up in the network on round i. Suppose that each Fj is a 
partial matching. 

Then the algorithm will keep maintaining a {2t — l)-spanner H, and for every edge e G IJFj, the 

treatment tim,e of e is 1. Moreover, if the graph, the ordering of edges, and the topology updates are 
determined by a non- adaptive adversary obliviously of the random, coins of the algorithm, then with high 
probability the spanner contains 0{{t ■ logra)^"^/* • n^^^^*) edges at every step of the algorithm. 

We next extend Corollary 6.3 to scenarios when the sets Fi have small maximum degree. Let Aj be 
the maximum degree of a vertex in the graph (y,Fi), and Ri be the index of the round on which the 
edges of F^ appear in the network. We show that if Ri+i — Ri > 2Aj — 1 for every i = 1,2, . . ., then the 

treatment time of an edge e E Fi is at most 2Aj — 1, for every i = 1,2, We then argue that the bound 

of 2Aj — 1 cannot be further improved using our algorithm. 

Lemma 6.4 Consider a sequence of update edge sets Fi, F2, . . . that arrive on rounds Ri, R2, . . ., respec- 
tively, and assume that before the round Ri starts the network is stable, and that Ri+i — Ri > 2Aj — 1, 
for i = 1, 2, . . ., where Aj be the maximum degree of a vertex in Fi. For i = 1,2, . . ., every edge e E Fi is 
scanned by the Algorithm Sync-Incr within 2Aj — 1 rounds after it appears in the network. 

Proof: Similarly to Lemma 6.2, we prove by induction on i, i = 1, 2, . . ., that before the round Ri starts 
the network is stable, and all the edges of the set U}=i ^3 were already scanned, and moreover, each edge 
e G Fj, J G [i — 1], was scanned within 2Aj — 1 rounds after its appearance. 

The induction base holds vacuously. Suppose the induction hypothesis, and consider an edge e = 
{w,w') G Fi, appearing on round Ri. At each moment of the execution of the algorithm, let the active 
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degree of an edge e = {w, w'), denoted actdeg{e), be the number of the not yet scanned edges adjacent to 
either w or w'. For a round R, let actdegji{e) denote the active degree of the edge e at the beginning of 
the round R. 

There are at most Aj — 1 edges e' G Fi adjacent to w, e' 7^ e, at most Aj — 1 edges e' E Fi, e' ^ e, 
adjacent to w' , and the edge e also contributes 1 to the active degree of e on roTuid Finally, by the 

induction hypothesis, the network is stable right before the round Ri starts, and consequently, all edges 
adjacent to one of the endpoints of e that do not belong to F^ were already scanned at this stage. Hence 
actdeg ji^{e) < 2Ai — 1. 

Consider a round R, Ri < R < Ri + (2Ai — 1), such that the edge e is not yet scanned in the beginning 
of the round R. We argue that the active degree of e necessarily decreases at least by 1 on each such a 
round. 

Suppose without loss of generality that Pr{w) -< Pr(w'), where Pr{w) (respectively, Pr{w')) stands 
for the value of the label P{w) (resp., P{w')) at the beginning of the round R. At the time moment a on 
which the vertex w reads the edge e = (w, w') on round R, if the value of P{w) is still smaller (in terms 
of -<) then Pji{w') then the edge e is scanned, and we are done. It can happen, however, that P{w) grew 
during the time period starting with the beginning of the round R and ending with the moment a. But 
this could only happen if w scanned another edge e' adjacent to it, and then its active degree decreased 
by 1. This completes the proof. | 

The desired extension of Corollary 6.3 follows now directly from Lemma 5.8. 

Corollary 6.5 Under assumptions of Corollary 6.3, let i?i,i?2, • • • he a monotonely increasing sequence 
of rounds, and Fi, F2, . . . he a sequence of edge sets with Fi being the set of edges that appear on round 
Ri, i = 1, 2, . . .. Let Ai be the maximum degree of a vertex in Fi, and suppose that — Ri> 2Aj — 1. 

Then Algorithm Sync-Incr keeps maintaining a (2t — 1) -spanner that satisfies the properties listed in 
Corollary 6.3, except for the treatment time of edges of{jFi. In this scenario for every i = 1,2, . . ., and 
an edge e E F^, the treatment time of e is at most 2Aj — 1. 

We remark that Theorem 6.1 provides a uniform bound of 2t rounds on the treatment time of every 
edge appearing in the network in any incremental scenario, and the limitations of Corollaries 6.3 and 6.5 
arc geared to single out some cases where (the already very strong) uniform upper bound of 2t can be 
further improved. 

Finally, we show that the bound of 2Aj — 1 cannot be improved using our algorithm as is. Consider 
the following directed graph F. The vertex set of the graph consists of the "central vertex" v, the ver- 
tices n(l), u(2), . . . , u{A), the vertices z{l),z{2), . . . , z{A), and the vertices w{l, l),w{l, 2), . . . , w{l, A — 
2), u'(2, 1), . . . , ti;(2, A — 2), . . . , ^(A, 1), . . . , u'(A, A — 2). The edge set contains the oriented edges 
{{u{{),v) I i G [A]}, the edges {{z{i),w{i,j)) \ i G [A],j € [A - 2]}, the edges {{u{i),w{i,j)) \ i G 
[A], j G [A - 2]}, and, finally, {{z{i),u{i)) \ i G [A]}. See Figure 1. 

We next describe an execution scenario of our algorithm. Suppose that the undirected underlying 
graph F of F is the update edge set provided to the algorithm on round R. An edge is oriented from a 
vertex a; to a vertex y if and only if P{x) -< P{y). Suppose that on round R the labels of V{F) satisfy 
the order relationship determined by the directed graph F. The maximum degree of F is A. 

On the first round (after detecting the edges of F) each vertex u(i), i G [A], scans the edge 
(n(i), Tt;(i, 1)), and each vertex z{i), i G [A] scans the edge {z{i),w{i,l)). (The vertex v scans noth- 
ing as all its adjacent edges are incoming.) 

On the second round each u{i) scans the the edge {u{i),w{i,2)), and each z{i) scans [z{i),w{i,2)), 
etc., for each round j = 1,2, ...,A — 2, on round j the edges {u{i),w{i,j)) and (2;(i), u'(i, j)) for all 
i G [A] are scanned. Hence after A — 2 rounds we are left with the graph F' in which only the edges 
{{z{i),u{i)),{u{i),v) I i G [A]} are present. 
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Figure 1: The graph F with A = 4. The edges are depicted by thin solid edges. The dashed thick 
lines are used to associate the vertices w{l,l), w{l,2) and u;(l,3) with the points that represent these 
vertices in the figure. The three "sacks" depict three isomorphic copies of the graph induced by the vertices 

z{l),uil),w{l,l),w{l,2),w{l,3). 



Moreover, suppose that on round A — 2 each edge {z{i), u{i)) "switches orientation". This can happen 
if each z{i), i G [A], adapted the label of the "late" w{i,A — 2) (whose active degree has just become 
zero), and this label is greater than that of u(i). The resulting edge set is {{u{i), z{i)), {u{i), v) \ i G [A]}. 

On the (A— l)st round every vertex u{i) scans the edges {u{i),z{i)), i G [A], and its labels grow enough 
for all the remaining edges {u{i),v) to switch orientation. Wc then obtain the star {{v,u{i)) \ i £ [A]}. 
Now V takes its time scanning each of the A edges adjacent to it one by one. Consequently, in this 
scenario 2A — 1 rounds are required to the algorithm to scan all the edges of a set F of maximum degree 
A, and the analysis of Corollary 6.5 is tight. 

7 Adapting the Algorithm to the Asynchronous 
Environment 

In this section we adapt our algorithm to the asynchronous model of distributed computation. 

Note that one can use a standard technique of a- synchronization [7, 30] that converts any synchronous 
algorithm into an asynchronous one. However, this approach has several drawbacks. First, the upper 
bound on the running time of the algorithm would grow by a factor of 3, that is, become 6t instead of 2t. 
While it is a common practice to ignore this constant factor of 3 in the running time, the running time 
of our algorithm is so small that this factor may well be significant. (Recall that t is usually a constant, 
and it is always true that t = O(logn).) 

Another drawback of a-synchronization is that it also entails an increase in a message complexity of 
the algorithm. Specifically, a message is sent on each time unit through every edge of a network that 
runs an a-synchronizer. Consequently, using a-synchronization would increase the message complexity 
of our algorithm by a factor of 3 for every input, and there are many inputs on which the overhead is 
even larger. These are the scenarios on which most edges are scanned after being read only a constant 
number of times, but the algorithm still keeps running for 2t rounds in all, or almost all, vertices. The 
message complexity of the synchronous variant on these inputs is 0(|£'|), while the message complexity 
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of the asynchronous variant is 0(t ■ \E\). 

Finally, and perhaps, most importantly, a-synchronization is a static synchronization technique, and it 
is not a-priori clear that it is applicable to a dynamic (though only incremantal) setting. In fact, Awerbuch 
and Sipser addressed this problem in [15], and have devised a dynamic analogue of a-synchronization, 
but their synchronizer entails even greater overheads in time, message, and space complexities. Synchro- 
nization methods other than a-synchronization require a significantly larger initialization time than the 
running time of our algorithm, and consequently, they are not applicable in this context (unless one is 
prepared to compromise the running time) . 

In view of these drawbacks it is advantageous to adapt our algorithm directly to the asynchronous 
environment, and we do so in this section. 

7.1 The Asynchronous Algorithm 

Each vertex v marks each of the edges e adjacent to v by either OLD or NEW marks. These marks are 
stored in fields v.mark{e), for every vertex v and edge e adjacent to v. When an edge e = {w, w') appears 
in the network, both its endpoints mark it as NEW (set the fields w.mark{e) and w'.mark{e) to NEW) 
when they detect it, and each of them switches its mark to OLD after sending the first message through 
it. 

Each vertex v also maintains a field v. status {e) for every edge e adjacent to v, and this field is equal 
to either SCANNED or NOTSCANNED, depending on whether the edge was or was not scanned by the 
algorithm. All the statuses are initialized as NOTSCANNED. 

To adapt Algorithm 3 to the asynchronous setting we invoke the Procedure Async-Rnd instead of 
the Procedure Round on line 7 of the algorithm. We next describe the Procedure Async-Rnd. First, the 
vertex v initializes the fields v.mark{e) and v.status{e) for every edge e adjacent to v that just appeared in 
the network. Then for every edge e = («, u) adjacent to v over which v received the message SCANNED, 
V changes the status of e to SCANNED. Next, the vertex v waits until it receives a message over each of 
the edges adjacent to v that are marked as OLD and have status NOTSCANNED. 

Then the vertex v executes the while loop which is very similar to the while loop of Algorithm 2. 
The only difference is that every edge {v, u) for which P{u) >~ P{v) holds becomes scanned by v, and v 
updates the status v.status{e), and sends the message SCANNED to u over e. 

Finally, after the execution leaves the while loop, v sends the message {P{v), ttl{v)) to each neighbor 
uoiv such that e = {v, u) has status NOTSCANNED, and sets the mark of each edge e as above to OLD 
(if it was NEW). This means that the vertex v will not start the while loop of the next round before 
getting a message over this edge. 

The formal description of the Procedure Async-Rnd follows. 
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Algorithm 4 The Procedure Async-Rnd. The pseudo-code is for a fixed vertex v ^V. 
1: for each edge e = [v, u) that appeared in the network, and its appearance is now detected by v do 
2: v.status{e) *- NOTSCANNED; v.mark{e) NEW 
3: end for 

4: for each edge e such that the message SCANNED arrived over e do 
5: V. status {e) ^ SCANNED 
6: end for 

7: Wait until you receive messages {P{u), ttl{u)) over all edges e = {u,v) such that v.status{e) = 
NOTSCANNED and v.mark{e) = OLD 

8: while 3 message (P{u), ttl{u)) with P{u) >- P{v) do 

9: lines 3-7 of the Procedure Round (Algorithm 2) 
10: v.status{e) ^ SCANNED 
11: Send the message SCANNED to u 
12: end while 

13: Send to all your neighbors u such that v.status{e = {v,u)) = NOTSCANNED the message 
{P{v), ttl{v)) 

14: for each edge e as above with v.mark{e) = NEW do 
15: v.mark{e) <— OLD 
16: end for 



7.2 The Analysis 

In this section we analyze the asynchronous incremental algorithm, Algorithm 4. We start with a few 
observations. First, the messages are not labeled by the current number of round of the sender, and, 
consequently, the version of the algorithm that we presented assumes that for a fixed edge e = {v,u), 
all the messages sent by an endpoint v over e arrive to u in the First-In-First-Out (henceforth, FIFO) 
manner. This assumption can be eliminated at the expense of making the analysis slightly more complex. 
(The main change in the algorithm will be attaching the current round of the sender to every message 
sent.) Since our argumentation here extends in a standard way to this more general case, we opt for 
presenting a somewhat simpler variant. 

In this context note also that with this algorithm, a vertex v never stores more than two messages 
received from the same neighbor w of v. This is because the algorithm dictates a "ping-pong" of messages 
between v and w. In other words, suppose that the vertex v sends a message Mi to w, and receives a 
message A42 from w. It may happen that w finishes processing A4i, and sends v a message A^s, but 
for sending v a yet additional message the vertex w has first to receive a new message Ai'^ from 
V. However, for v to send M'l, v must finish processing M.2- Once v finishes processing M.2, v discards 
it. See Figure 2. This property enables to abandon the assumption that messages arrive in the First- 
In-First-Out manner. Specifically, if this is not the case, it is sufficient to attach a parity bit to each 
message, and to make the receiver wait for the message with the correct parity. 

Consider an edge e = {v,u). Consider the pair of invocations of the Procedure Async-Rnd by the 
vertices v and u on which v and u, respectively, detected the appearance of the edge e, and sent messages 
over e on line 14. This pair of invocations is called the first round with respect to the edge e. Analogously, 
for some integer j, j > 1, consider the pair of invocations of the Procedure Async_Rnd by v and u on 
which V and u, respectively, have sent their jth messages over e. This pair of invocations is called the jth 
round with respect to e. 

Equipped with these observations and definitions, we can now use the definitions of the beginning of 

Section 5.2 of reading and scanning an edge on a certain round. It is easy to verify that the proofs of 
Lemmas 5.2-5.7 hold for Algorithm 4 as well (or, rather for a static version of Algorithm 4 that invokes 
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Figure 2: The figure illustrates the flow of messages between the vertices v and w. 



the Procedure Async_Rnd for 2t times). 

The only change needed in the statement of Lemma 5.8 is that it has to refer now to the round i with 
respect to the edge e. The proof of Lemma 5.8 holds for Algorithm 4. Note that 2t rounds with respect 
to an edge e last at most 2t time units. Consequently, Theorems 5.9 and 6.1 extend to the asynchronous 
environment. (The running time becomes 2t time units. In the statement concerning the local processing 
time-per-edge one needs to refer to local clock cycles of a vertex rather than to rounds.) 

To extend the results of Section 6.3 to the asynchronous setting one needs to re-cast the statements 
of these results. Let Fi,F2, . . . be a sequence of edge sets that appear in the network at time moments 
ai, a2, . . ., respectively, and assume that ai < a2 < ■ ■ ■■ Assume that the network is stable at time ai, 
and that for every index j = 2,3, . . . the duration of the time period [aj-i,aj), aj — aj-i, is greater than 
two time units, and that each Fi is a partial matching. Then the treatment time of each edge e G Fj is at 
most two time units. (Note that there is a certain "price" for asynchrony here, in having the treatment 
time of two time units instead of one round in the synchronous case.) 

To prove this statement, we re-formulate Lemma 6.2 as follows. 

Lemma 7.1 For every i = 1,2,..., and edge e G Fi, the edge e = (u, iw) is scanned at time + 2 or 
before. 

Proof: The induction claim is that at time + 2 the network is stable, all the edges of U}=i were 
already scanned, and, moreover, for each index j G [i], and every edge e & Fj, the edge e was scanned no 
later than at time aj + 2. 

For the induction base {i = 1) consider an edge e = {w,w') G Fi. Let (3i (respectively, f3[) be the 
smallest time moment greater or equal to ai such that w (resp., w') invokes the Procedure Async-Rnd 
at that time. The vertex w (resp., w') sends P{w) (resp., P{w')) over the edge e at time (3i (rcsp., P[) 
on line 14 of this invocation of the Procedure Async-Rnd. Let 71 (resp., 7^) be the time moment when 
w receives and starts processing P{w') (resp., P{w)) on line 7 of the Procedure AsyncJlnd. 

Note that w detects e on its first round with respect to e, and it processes e (enters the while loop 
with a message received over e) only on its second round with respect to e. The same statement is true 
for the vertex w' . In other words, ai < /3i < 71 and cti < /3( < 7^. See Figure 3 for an illustration. 

It follows that /3( < ai + 1, and 71, 7^ < ai + 2. Since the network is stable at time a\, all edges 
adjacent to w or w' are scanned at time ai. Moreover, Fi is a partial matching, and so e is the only new 
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Figure 3: The time scale of the events in the proof. The events occurring with the vertex w (respectively, 
w') are depicted in the left (resp., right) vertical line, the horizontal line represents the time moment ai, and 
the diagonal lines represent to flow of the messages between w and w'. The time axis is depicted by vertical 
lines, and it is oriented from top to bottom. 



edge appearing in the network during the time period [ai,Q;i + 2], adjacent to either w or w'. It follows 
that the label of w, P{w), did not change during the time period [ai,7i). Analogously, P{w') did not 
change during the time period [ai , 7^ ) • 

Hence if P{w) -< P[w') then w scans e at time 71 < ai + 2, and otherwise w' scans e at time 
7i < «i + 2. In either case we are done. 

The induction step is proven in an analogous way, by combining this argument with that of proof of 
Lemma 6.2. | 

Hence, Corollary 6.3 extends to the asynchronous setting, provided that the update edge sets Fi, F2, . . . 
arrive with more than two time units between each pair of consequent sets. Corollary 6.5 extends in an 
analogous way. The extended result is summarized in the following corollary. 

Corollary 7.2 Consider a sequence of update edge sets that arrive at time moments ai,a2, ■ ■ ■, ai < 
a2 < ■ ■ ■, and assume that the network is stable at time ai, and that Oj+i — Qj > 2Aj = 2A(Fj), for all 
i = 1, 2, . . .. For i = 1,2, . . every edge e E Fi is scanned no later than at time + 2Aj. 

8 Adapting the Algorithm to the Distributed 
Semi-Decremental Setting 

In the following two sections we present a fully dynamic version of our distributed algorithm, and analyze 
it. 
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8.1 Preliminaries 



Each vertex maintains explicit variables X{v) and T{v), X{v) U T{v) = Sp{v). The edges of X{v) 
(respectively, T{v)) will be called the X-edges (resp., T-edges) adjacent to v. A crash of an edge e = {u, w) 
is called a soft crash if e (T{u) U T{w)), and is called hard crash otherwise. The semi-decrem,ental 
scenario is the scenario that assumes that no hard crashes occur. In this section we analyze this scenario, 
and we extend the analysis to the fully dynamic setting in Section 9. 

During an execution of the algorithm, each vertex v acquires labels once in awhile, and loses labels 
once in awhile (as a result of edge crashes). A label P of w is called active at a certain time moment a 
if V was labeled by P at some earlier time during the execution, and the label P was not lost since then. 
Note that a vertex is allowed to acquire a new label without losing his previous label, and his previous 
label remains active unless it was explicitly lost as a result of certain edge crashes. We will soon elaborate 
on it. 

Each vertex v maintains a table A{v) that keeps track of all active labels of v. The number of active 
labels for a given vertex never exceeds the parameter t. In the semi-decremental setting labels are never 
lost by vertices, and thus, each vertex is labeled by at most t labels during the execution. Note that 
the table A{v) has a different functionality than the table M{v). For every base value B a label P 
appearing in M{y), the algorithm maintains a queue M{y)[B\ of edges {v,z) with P{z) >- P(v) = P, 
B{P{z)) = B. (The notations P{z) and P{v) refer to the labels of z and v, respectively, at the time 
of scanning the edge {v,z) by v.) The edges {v,z) of this kind form a set denoted D{v), and are called 
dropped or D- edges. In the static and incremental variants of the algorithm such edges were plainly 
discarded. However, if edges are allowed to crash, we may need these edges as a replacement for edges 
that are currently X-edges, in case that the latter edges happen to crash. 

Fix a vertex v. For every edge e = (v, w) adjacent to v, the vertex v maintains a number of local 
variables. Particularly, the variable v.mark{e) is equal to either NEW or OLD (see Section 7.1), and 
the variable v.status{e) is equal to either SCANNED, NOTSCANNED or CRASHED. (This variable 
was equal to SCANNED or NOTSCANNED so far because we did not consider edge crashes until now.) 
There is also a variable v.scan-status{e), called the scan-status of e, that accepts values T, X or D, 
depending on whether the edge was scanned as a T-cdgc, X-cdge, or D-edge, respectively. 

There is also a variable v. label (e) maintaining the label of the edge e at the time it was scanned for 
the last time. (The label of e is the label of one of the endpoints of e at time that e was scanned.) The 
label of the other endpoint of e at the time of its scanning is stored at another variable v.secJabel{e). 
This variable is called the second label of the edge e. There is also a variable v.own{e) that accepts values 
SELF and PEER, depending on whether the edge e = {v, w) was scanned by v or w. (If v scanned 
it then v.own{e) = SELF, and w.own{e) = PEER, and if w scanned it then vice versa.) We also use 
the notation v.X, v.T, v.D, v.Sp, v. A, v.M for denoting X{v), T{v), D{v), Sp{v), A{v), and M{v), 
respectively. 

Fix a vertex v. We say that the edge e = {v, u) adjacent to v is self-scanned (respectively, peer- 
scanned) if v.status{e) = SCANNED and v.own{e) = SELF (resp., v.own{e) = PEER). Observe that 
the set v.T (respectively, v.X; v.D) is the set of self-scanned T-edges (resp., X-edges; £)-edges) adjacent 
to V. 

We remark that the size of the data structures maintained by a vertex v is still almost as small as it 
is for the incremental algorithm. Specifically, it is 0{{deg{v) + 1) ■ logn). (Though the constant hidden 
by 0-notation is larger here than for the incremental algorithm). In particular, unlike many previous 
dynamic distributed algorithms (such as [15, 11]), our algorithm maintains no explicit history of previous 
communication . 
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8.2 The Algorithm 



We next describe the version of our algorithm that is robust against soft crashes. The algorithm is identical 
to Algorithm 3 except that it invokes the Procedure Dyri-Rnd instead of the Procedure Async-Rnd. 

We next describe the Procedure Dyn_Rnd. Let v denote the vertex that executes the procedure. The 
procedure uses the same data structures as in Procedure Async-Rnd, and, in addition, it maintains the 
table A{v) = v. A of active labels of the vertex v. This table is initialized as empty. As the execution 
proceeds, each label acquired by the vertex v is recorded in the table A{v). Later on crashes of certain 
edges may cause the vertex v to remove some of the labels from the table A{v). This cannot, however, 
happen in the semi-decremental setting, and thus we defer the discussion of this issue to Section 9. 

The procedure starts with a loop that initializes the status and mark variables for all the edges 
that just appeared in the network. Next, the procedure goes over all the edges e such that v has 
just received the message SCANNED over them, and sets their status to SCANNED . However, unlike 
the Procedure Async-Rnd, in the Procedure Dyn^Rnd each message SCANNED will also convey some 
additional information, such as the scan-status of e, the label of e, and the second label of e (that is, the 
label of the other endpoint of e at the time it was scanned). 

Next, the procedure enters the crash-loop (Procedure CrashLoop). The crash- loop consists of two for- 
loops. In the first for-loop all edges e adjacent to v that crashed on the previous round of v are processed. 
If the edge e was not yet scanned, or scanned by its other endpoint, then v needs to do nothing beyond 
recording this crash, that is, setting v.status{e) to CRASHED. Otherwise, if the status of e is I? (the 
edge was dropped) then, in addition to marking the edge as CRASHED, the algorithm also updates the 
data structure M{v) accordingly. We remark that even if a queue v.M[B] becomes empty as a result 
of removing e, still the value B should stay in the table v.M because there is an X-edge adjacent to v 
connecting i' to the cluster B. (The cluster B is the set of vertices that have an active label of base B.) 

If the status of e is X (e is an X-edge), then the procedure fetches from M{v) a dropped edge that 
can replace e. This is done by the Procedure XReplace, described later in the sequel. Finally, if e is a 
T-edge then the procedure updates the set T{v), and invokes the Procedure Crash. Note, however, that 
in the semi-decremental scenario the execution cannot possibly reach this stage, because in this scenario 
T-edges never crash. Hence we defer the description of this procedure to Section 9. 

Finally, the second for-loop of the Procedure CrashLoop iterates over all edges e over which the vertex 
V received the message CRASH on its previous round. However, messages CRASH are sent only from 
the Procedure Crash, and the Procedure Crash can be invoked only as a result of a crash of a T-edge 
(that is, a hard crash). Since in the semi-decremental setting hard crashes never occur, it follows that in 
this setting the execution never enters the second for-loop of the Procedure CrashLoop. 

Next, the Procedure Dyn^Rnd waits until v receives messages {P{u), ttl{u)) over all not scanned edges 
e = {u,v), and processes them in a way similar to lines 8-13 of the Procedure Async_Rnd (Algorithm 
4). One difference is that in the Procedure Async_Rnd, as well as in the Procedure Round, the edges 
e = {u, v) such that ttl{u) = (meaning that the label of the vertex u is not selected) and B{P{u)) G M{v) 
are discarded, and in the Procedure Dyn^Rnd they are stored in an appropriate queue in M(v). Another 
difference is that once a vertex v acquires a new label P{v) (this can happen only on line 11), this label 
is recorded in the table A{v) of active labels of v. 

Finally, the procedure sends the messages {P{v),ttl{v)) over all non-scanned edges adjacent to v, 
and updates the marks of edges over which the first message was sent (exactly like in the Procedure 
Async_Rnd). 

The formal description of the Procedure Dyn_Rnd follows. Figure 4 illustrates the rules that are used 
by the procedure to determine the values of different variables for T-, X- and D-edges. 
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Figure 4: In the left-hand figure e = {u,v) is a T-edge scanned by v. In this case P{v) is set as P{u) + n, 
v.label{e) is set to P{v), v.secJabel{e) is set to P{u), and v.own{e) is set to SELF . In the right-hand figure 
e = (u, f) is an X- or D-edge scanned by v. In this case the label of v does not change, v.label{e) is set to 
P{u), v.secJabel{e) is set to P{v), and v.own{e) is set to SELF. 



Algorithm 5 The Procedure Dyn_Rnd. The pseudo-code is for a fixed vertex G 
1: (Showup-loop) lines 1-3 of the Procedure Async-Rnd (Algorithm 4) 

2: Wait until some message is received over all edges e = {u,v) such that {{v.status{e) = 

NOTSCANNED) and {v.mark{e) = OLD)) 
3: for each edge e such that the message SCANNED{scan-status , P, P') arrived over e do 
4: v.status{e) ^ SCANNED; v.scan-status{e) <— scan_status; v.label{e) <— P; v.secJabel{e) <— P'; 

v.own{e) <— PEER 
5: end for 

6: Invoke Procedure CrashLoop 

7: Iterate over messages {P(u), ttl{u)) received over edges e = (v,u) that satisfy the condition of line 2 

in an arbitrary order and do 
8: while (Scan-loop) 3 message {P{u), ttl[u)) with P{u) >- P{v) do 
9: v.status{e) ^ SCANNED; v.own{e) ^ SELF 
10: if ttl{u) > then 

11: P{v) ^ P{u) + n; ttl{v) ^ ttl{u) - 1; v. A ^ v.A U {P{v)} 

12: v.label{e) ^ Piu) + n; v.T <— v.T U {e}; v.scan-Status{e) ^ T; v.secJabel{e) ^ Piu) 
13: Send the message SCANNED{T, P{v), P{u)) to u over e 
14: else 

15: v.labd{e) ^ P{u); B ^ B{P{u)); v.secJabel{e) ^ P{v) 
16: if B ^ v.M then 

17: V.M V.M U {B}; v.X <- v.X U {e}; v. scan .status (e) <— X 

18: Send the message SCANNED{X, P{u), P{v)) to u over e 

19: else 

20: v.M[B] ^ v.M[B] U {e}; v. scan. status {e) ^ D; v.D ^ v.D U {e} 

21: Send the message SCANNED{D, P{u),P{v)) 

22: end if 
23: end if 
24: end while 

25: lines 14-17 of the Procedure AsyncRnd 



The formal description of the Procedure CrashLoop follows. 
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Algorithm 6 The Procedure CrashLoop. 
1: for all edges e adjaeent to v that crashed on the previous round of the vertex v do 
2: CrashItern{CRASHED) 
3: end for 

4: for all edges e adjacent to v over which the message CRASH arrived on the previous round of the 

vertex v do 
5: CrashRern{NOTSCANNED) 
6: end for 



The Procedure CrashRern accepts as input one parameter crash status , which may be equal to ei- 
ther CRASHED or NOTSCD. This parameter determines the crash status of edges processed by the 
Procedure CrashRern. The pseudo-code of the Procedure CrashRern follows. 

Algorithm 7 The Procedure CrashRern {crash status) . 
1: if {v.status{e) = NOTSCANNED) or {v.own{e) = PEER) then 
2: v.status{e) <— crashstatus 
3: else 

4: V. status (e) crashstatus; P <— v. label (e); B <— B{P) 

5: if V. scan status (e) = D then 

6: v.M[B]^v.M[B]\{e};v.D^v.D\{e} 

7: else if v .scanstatus (e) = X then 

8: XReplace{P, e) 

9: else 

10: v.T ^v.T\{e} 
11: Invoke Crash{P) 
12: end if 
13: end if 



The Procedure XReplace accepts as input the label P and the edge e. The procedure is invoked when 
the X-edge e crashes, and the procedure makes an attempt to find a replacement for it. This replacement 
can come only from the set of dropped edges with base value B, stored in the queue v.M[B]. If this queue 
is not empty, the procedure fetches an edge e' from this queue, removes it from the queue, and inserts it 
into the set v.X of the self-scanned X-edges adjacent to v. If the queue is empty the procedure realizes 
that this edge has no replacement, and updates the set v.M to reflect the fact that v has no longer an 
edge connecting it to the cluster B. When the next edge of this kind will be scanned, the algorithm will 
not drop it, but rather use it as an X-edge. Finally, the crashed edge e is removed from the set v.X in 
either case. 

There is one delicate point in this description. Some of the dropped edges from v.M[B] may themself 

crash at the same time as e crashes, and the algorithm still did not have a chance to update their status. 
To handle this difficulty, the procedure employs a while loop that fetches an edge until it finds an edge 
that did not crash, or discovers that the queue is empty. This loop is henceforth called fetch-loop. 
The formal description of the Procedure XReplace follows. 
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Algorithm 8 The Procedure XReplace (P, e) . 

1: B ^ B{P); fetched <- FALSE 

2: while (fetch-loop) {v.M[B] 7^ 0) and {fetched = FALSE) do 

3: Fetch an edge e' = (u, u') from the queue v.M[B] 

4: if e' crashed on the previous round of the vertex v then 

5: v.M[B] ^ v.M[B] \ {e'}; v.D ^ v.D \ {e'} 

6: else 

7: fetched ^ TRUE; 
8: end if 
9: end while 

10: if fetched = TRUE then 

11: v.X ^ v.X \ {e} U {e'}; v .scan-status{e') ^ X 

12: v.M[B] ^ v.M[B] \ {e'}; v.D ^ v.D \ {e'} 

13: Send the message SCANNED{X, P, v.secJabel{e')) to u' over e' 

14: else 

15: v.M ^ v.M \ {B}; v.X ^ v.X \ {e} 
i(): end if 



We remark that the algorithm does not really need to maintain the set v.D explicitly. 
8.3 The analysis 

In this section we show that the algorithm described in Section 8.2 maintains a sparse spanner in a 
semi-decremental setting. 

8.3.1 The Preliminaries 

We start with presenting some notation. Fix a vertex v, and a round R of v. (If the setting is synchronous, 
this is a global round R. If it is asynchronous, this is the i?th clock cycle of v.) We refer to the 
values of different variables local to v at the beginning of round R using the bracket-notation {R}. 
Particularly, v.T{R} is the value of the variable v.T at the beginning of round R of v. We also use the 
notation v.T{R, END} to denote the value of the variable v.T at the end of round R of v. Note that 
v.T{R, END} = v.T{R + 1}. 

Let i, i >0, be the number of edges adjacent to v that are processed by v in the crash-loop of round 
R of V. Let A;, A; > 0, be the number of edges adjacent to v that v scans on its round R. For an index i, 
1 < i < £ + k, let {v, R, i} denote the time moment on which the vertex v starts processing the ith edge 
adjacent to it on its round R, and v.T{R, i} denote the value of the variable v.T at time {v, R, i}. Note 
that the time moment {v, R, 1} is the time moment when the vertex v starts the crash-loop of its round 
R, and it is different from the moment when the round R oi v starts. 

If 1 < i < ^ then the zth edge is processed inside crash-loop (that is, by the Procedure CrashLoop). 
Otherwise, it is processed in the while loop, on lines 8-24 of the Procedure Dyn_Rnd. This loop will be 
henceforth referred to as the scan-loop. In the asynchronous setting, for a time moment a, we use the 
notation v.T{a} to denote the value of the variable v.T at time a. (This notation, like the notation 
v.T{R,i}, will be used for other variables than v.T as well.) 

One more local variable that we will refer to is the variable v.E that stores the set of edges incident 
to v whose status is either SCANNED or NOTSCANNED, but not CRASHED. This variable needs not 
to be maintained explicitly, but will be useful in the analysis. 
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The following two properties of the semi-decremental setting will be very helpful for the analysis. 
Recall that Sp = \J^^y v.Sp, and T = U„ v-T. 

Observation 8.1 // an edge e belongs to the set Sp, the only way for e to stop belonging to Sp is to 
crash. Moreover, the only way for a scanned edge e to stop being scanned is to crash. 

Proof: The set Sp consists of T-edges and X-edges. T-edges never crash in the semi-decremental setting. 
An edge e is removed from v.X only on lines 11 and 15 of the Procedure XReplace (Algorithm 8). However, 
in both these cases the edge e is an input parameter of the Procedure XReplace. Hence the edge e either 
crashed, or the message CRASH was received by v over e. Messages CRASH are sent only as a result of 
a hard crash, and hard crashes are impossible in the semi-decremental setting. | 

The next observation states that Lemma 5.7 still holds. 

Observation 8.2 For a pair of vertices v, v' € V, if there exist indices R, R', i, i' such that B{v.P{R, i}) = 
B{v' .P{R' ,i'}), and {v,R,i) < {v',R',i') (using the notation of Section 5.3), then the set T{v' , R' ,i'} 
contains a path of length at most L{v.P{R,i}) + L{v' .P{R' connecting the vertices v and v' . 

To verify this observation note that the T-edges are not allowed to crash in the semi-decremental 
setting. In the asynchronous setting the more convenient form of this observation is the following one. 

Observation 8.3 For a pair of vertices v,v' G V, if there exist time moments a, a', a < a', such 
that B[v.P{a}) = B{v' .P{a'}), then T{a'} contains a path of length at most L{v.P{a}) + L{v' .P{a'}) 
connecting the vertices v and v' . 

8.3.2 Validity of Local Data Structures 

In this section we show that Algorithm 5 maintains correct data structures. The next lemma focuses on 
the validity of the sets v.M[B]. 

Lemma 8.4 For a vertex v and a round R of the vertex v, let £, £ > (respectively, k, k > 0) be the 
number of edges adjacent to v processed in the crash-loop (resp., scan-loop) of the round R of the vertex 
V. Let i, i € [i + k], be an index. 

1. If a value B belongs to v.M{R, i} then there exists an edge e' = {v, u') such that 

(a) v.status{e'){R,i} = SCANNED, v.scan_status{e'){R,i} = X, Also, let P = v.label{e'). Then 
B{P) = B. In addition, el G v.X{R,i\, v .own{(^){R,i} = SELF. 

(b) The vertex u' was labeled by a label P' of base B at some time a, a' < P, where P is the time 
moment {v, R, i}. 

2. If an edgee" = iv,u") G v.M[B]{R,i} then v. scan .status {e"){R,i} = D, e" G v.D{R,i}, B{v.label{e"){R,i}) = 
B, v.own{e"){R,i} = SELF, and v.status{e"){R,i} = SCANNED. Moreover, the paragraph lb 

holds for the vertex u" . 

Proof: The proof is by induction on time moments i}. The induction base is the time {t;,l,l}. 

This is the time when the vertex v invokes the Procedure Dyn-Rnd for the first time. At this point the 
table v.M is empty, and thus the lemma holds vacuously. 

Next, we prove the induction step for Part 1. We assume the statement for a moment {v, R, i}, R > 1, 
i > 1 are integers, and prove it for the "next" time moment. The next time moment is either {v, R, i + 1} 
if the vertex v processes i + 1 or more edges on its round R, oi {v, R + 1,1} otherwise. Our analysis for 
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these two cases is identical, and thus, to simpHfy the notation we assume that {V,R,i + 1} is the next 
time moment after {v,R,i}. 

Consider a value B, B € v.M{R,i + 1}. The analysis splits into two cases depending on whether 
B ^ v.M{R, i} or not. 

1. {B v.M{R,i}) 

Consequently, the value B joins v.M when v processes the ith edge e = {v,u) adjacent to v on its 
round R. Since no base value is ever inserted into the set v.M during the crash-loop, it follows 
that the edge e is processed in the scan-loop (lines 8-24, Algorithm 5). Moreover, the only step 
when a base value can join the set v.M is line 17 of Algorithm 5. In this case, however, the edge 
e satisfies all the requirements from the edge e' in the lemma, and we are done. (Particularly, the 
time moment (3 is equal to a = {v, R,i + 1}.) 

2. {B e v.M{R,i}) 

By the induction hypothesis, there exists an edge e' = {v,u') that satisfies the requirements of the 
lemma at time {v,R,i}. The discussion now splits into two subcases, depending on whether the 
ith processed edge e = {v,u) is processed in the scan-loop or in the crash-loop. 

(a) (The edge e is processed in the scan-loop.) 

No edge is ever removed from v.X, and no edge e ever changes its status from SCANNED 
to NOTSCANNED or CRASHED , and no scanned edge ever changes its fields v.own{e) or 
v.lahel{e) during the scan- loop. Consequently, the edge e' satisfies the requirements of the 
lemma at time {v,R,i + 1} as well. 

(b) (The edge e is processed in the crash-loop.) 

Recall that B e v.M{R,i} and B G v.M{R,i + 1}. If e 7^ e' then the edge e' satisfies the 

requirements of the lemma at time {v, R,i + 1} as well, and we are done. 

If e = e' then the execution invokes the Procedure XReplace with parameters (P, e'), with 
P = v.label{e'){R,i}. Moreover, B{P) = B. If v.M[B]{R,i} = then the execution of the 
Procedure XReplace does not enter the fetch-loop, and proceeds directly to line 15 of Algorithm 
8. It follows that in this case B t;.M{i?, i+ 1}, contradiction. Hence there exists some edge 
e" = {v,u") € v.M[B]{R,i} that is fetched in the fetch-loop of the Procedure XReplace (lines 
2-9, Algorithm 8) of this invocation. By the induction hypothesis of Part 2 of the lemma, since 
e" G v.M[B]{R, i}, the edge e" satisfies all the desired properties except that its scan-status is 
D instead of X, and it belongs to v.D and not to v.X. However, these two things are corrected 
on line 11 of this invocation of the Procedure XReplace, and we are done proving Part 1. 

Next, we prove the induction step for Part 2. Consider an edge e" = {v,u") G v.M[B]{R,i + 1}. 
Analogously to the proof of Part 1, we split the discussion into two cases, depending on whether the 
condition e" v.AI[B]{R,i} does or does not hold. 

1. (e" ^ v.M[B]{R,i}) 

Consequently, the edge e" joins the set v.M[B] when v processes the ith. edge e = {v, u) adjacent 
to V on the round R of v. Analogously to the proof of Part 1, in this case the edge e is necessarily 
processed in the scan-loop. Moreover, the edge e" can be added to v.M[B] only on line 20 of 
Algorithm 5 (Procedure Dyn-Rnd), and also, necessarily e" = e. In this case the different fields of 
e (that is, v.status{e), v.scan-status{e), v.own{e), v.label{e), etc.) were set correctly on lines 9, 15 
and 20 of the procedure. 

Moreover, the label B belongs to the set v.M{R, i}, since otherwise the execution would not reach 
line 20). Also, note that B is the base value of the label of the endpoint u" of e" at time {v,R,i}, 
proving the lemma. 



38 



2. (e" G v.M[B]{R,i}) 

By the induction hypothesis, the edge e" = {v,u") satisfies the requirements of Part 2 at time 
{v,R,i}. The discussion sphts into two subcases, depending on whether the ith processed edge 
e = {v, u) is processed in the scan-loop or in the crash-loop. 

(a) (The edge e is processed in the scan-loop.) 

Exactly the same argument as in Subcase 2a of the proof of Part 1 applies. 

(b) (The edge e is processed in the crash-loop.) 

If e 7^ e" then the edge e" satisfies the requirements of the lemma at time {v,R,i + 1}, and 
we are done. 

If e = e" then since by the induction hypothesis v.scan_status{e"){R,i} = D it follows that 
the execution of the Procedure Crashltem reaches line 6 and removes the edge e" from the set 
v.M[B]. This, however, contradicts the assumption of the lemma that e" G v.M[B]{R,i + 1}, 
and we are done. 

I 

The next lemma argues that the edge records stored by the vertices running the algorithm are main- 
tained correctly. 

Lemma 8.5 For v,R,k,£ and i as in Lemma 8.4, and an edge e = {v,u) adjacent to v that satisfies that 
V. status {e){R,i} = SCANNED and v.own{e){R,i} = SELF, the following statements hold. 

1. The set Sp{v,R,i} spans the edge e. 

2. If v.scan_status{e){R,i} = T then e G v.T{R,i}. 

3. If v.scan-status{e){R,i} = X then e G v.X{R,i}. 

4- If v.scan-status{e){R,i} = D then the following statement holds. Let (3 be the time moment 
{v,R,i}. Then there exists an edge e' = {v,u') G v.X{R,i} = v.X{P}, and a pair of time mo- 
ments a, a' such that a,a' < (3 such that B(u.P{a}) = B{u' .P{a'}) = B{v.label{e'){R,i}) = 
B{v.label{e'){P}). Let B = B{u.P{a}). Moreover, e G v.M[B]{R,i}, and B G v.M{R,i}. 

Remark: Intuitively, the statement 4 means that for every edge e G v.D, there exists an edge e' € v.X 
such that the edge e can serve as a replacement for the edge e'. 

Proof: Like the proof of Lemma 8.4, the proof of this lemma is by induction on time moments {v, R, i}. 

The induction base is the moment {f , 1, 1}, and it holds vacuously. 

For the induction step we assume the statement for a moment {v,R,i}, R > 1, i > 1, are integers, 
and prove it for the "next" time moment. Like in the proof of Lemma 8.4, to simplify the notation we 
assume that the next time moment is {v, R,i + I}. 

Consider an edge e = {v,u) with v. status {e){R,i + 1} = SCANNED, v.own{e){R,i + 1} = SELF. 
The analysis splits into two cases depending on whether the vertex v has set the value of the variable 
v.status{e) to SCANNED while processing the ith edge on round R, or earlier. 

1. (The vertex v sets the value of the variable v.status{e) to SCANNED while processing the ith edge 
on round R.) 

By inspection of the algorithm it is easy to verify that in this case the ith edge processed by v on 
round R must have been the edge e, and moreover, this processing occurred in the scan-loop (and 
not in the crash- loop). The reason for the latter is that in the crash-loop no unscanned edge ever 
becomes scanned, but rather already scanned edges may change their scan-status. 
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Consider the iteration of the scan-loop on which the message {P{u), ttl{u)) was processed. If 
ttl{u) > (meaning that the label of -u is a selected label) or if B(P(u)) v.M then the edge e 
was inserted to v.Sp on lines 12 or 17 of Algorithm 5, respectively, and in both cases we are done. 

Consider the case that ttl{u) = and B{P[u)) € v.M{R,i}. In this case the scan-status of the 
edge e was set to D on line 20. By Lemma 8.4 there exists an edge e' = {v, u'), e' G v.X{R, i}, and 
such that u' was labeled by a label P' of base B = B{P{u)) at the time when the vertex v scanned 
the edge e'. Then, by Observation 8.2, there exists a path 11 of length L{P{u)) + L{P') < 2t — 2 
connecting between u and u' in T{v,R,i}. Since e' = (v,u') G v.X{R,i}, it follows that there 
exists a path of length at most 2t — l connecting v and u in Sp{v, R, i}. Since no crashes of T-edges 
occur, all edges of the path IT survive till the moment {v, R,i + 1}. The edge e' = {v, u') belongs to 
v.X{R,i}, and is not removed from this set when the vertex v processes its ith edge on round R. 
The reason for the latter is that the ith processed edge is the the edge e = {v,u), and it is processed 
in the scan-loop. Hence e' G v.X{R,i + 1}, and we are done proving that the edge e is spanned 
by the edge set Sp{v,R,i + 1}. The statements 2, 3, and 4 follow directly from the induction 
hypothesis, and from the observation that the ith processed edge is processed in the scan-loop. 

2. (The vertex v sets the value v.status{e) to SCANNED before it processes the ith edge on round R.) 
The discussion splits into two subcases depending on whether the ith edge e, e 7^ e, was processed 
in the scan- loop or in the crash- loop. In the former case by the induction hypothesis we are done. 
Hence we next consider the case that the edge was processed in the crash-loop. 

U v.scan-status{e){R, i+l} = T then since e / e, the scan-status of the edge e was T at time {v, R, i} 
as well (that is, v.scan_status{e){R,i} = T), and thus, by the induction hypothesis, e G v.T{R,i}. 
Since e 7^ e, it holds that e G v.T{R, i + 1}, and we are done (proving the statement 2 of the 
lemma) . 

If V. scan status {e){R,i + 1} = X then by the same argument e G v.X{R,i + 1}, proving the 
statement 3. Note that since v.T{R,i + 1} U v.X{R,i + 1} = v.Sp{R,i + 1} C Sp{v,R,i + 1}, it 
follows that Sp{v,R,i + 1} spans the edge e in both cases, as required in the statement 1. 

Consider the case 

v.scan-Status{e){R,i + 1} = D . (4) 

Recall that the ith edge e = {v,u) processed by v on its round R, is processed in the crash-loop, and 
e 7^ e. By (4), it follows that v.scan_status{e){R,i} is equal to either D or X. 

If v.scan-status{e){R, i} = X then by the induction hypothesis, e G v.X{R, i}. However, the only way 
for the edge e to stop belonging to the set v.X is to crash. Since e 7^ e, it follows that e G v.X{R, i + 1}, 
and v.scan-Status{e){R,i + 1} = X, contradicting (4). 

Hence v.scan-status{e){R,i} = D. By the induction hypothesis there exists an edge e' = {v,u') G 
v.X{R,i} that satisfies the statement 4 of the lemma. If e' 7^ e then e' G v.X{R,i + 1}, and we are 
done. Finally, if e' = e then the processing of the edge e' = {v,u') in the crash-loop resulted in an 
invocation of the Procedure XReplace on line 8 of the Procedure Crashltem. This procedure was invoked 
with parameters {P,e'), with P = v.label{e'){R,i}. By the induction hypothesis, B{P) = B{u.P{a}) = 
B(u' .P{a'}), where a and a' arc the time moments whose existence is guaranteed by the induction 
hypothesis of the statement 4 of the lemma. 

The Procedure XReplace starts with the fetch- loop (lines 2-9 of Algorithm 8). Observe that by 
the induction hypothesis, e G v.M[B]{R,i}, and v. status {e){R,i} = SCANNED. Hence the fetch-loop 
necessarily succeeds in fetching an edge e = {v,u). If e = e then the edge e joins v.X = v.X{R,i + 1} 
on line 11, and v.scan-status{e){R,i + 1} = X. This, however, contradicts (4). Thus e 7^ e. In this case. 
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however, the edge e joins v.X{R, i + 1}, and it is easy to verify that e is the edge e' whose existence we 
need to prove to estabhsh the statement 4. | 

We will mostly use the statement 1 of Lemma 8.5, that is, that edge scanned at a time {v.R,i} is 
actually spanned by Sp{v, R, i}. Note, however, that when crashes are allowed, some edges belonging to 
v.Sp{R, i} may not be present in the network at time {v, R, i}. On the other hand, we next show that 
all edges of v.Sp{R, i} were present in the network at most one time unit before the time {v, R, i}. 

Lemma 8.6 For a vertex v, a round R, R > 2 of v, and indices i, I and k as in Lemma 8.5, the 
following statement holds. Ifi>£ + 1 then v.Sp{R,i} C v.E{R,l}. Otherwise (if i < i), v.Sp{R,i} C 
v.E{R- 1,1}. 

Remark: The set v.E{R, 1} contains all edges whose appearance was detected during the showup-loop 
of round R at vertex v (line 1 of Algorithm 5). 

Remark: Intuitively, as long as the crash-loop of round R is not over, the vertex v "does not know" 
which edges crashed on round R — 1, and thus it may use some edges that were present in the network 
in the beginning of the round R — 1 but crashed in the meanwhile as a part of the spanner it maintains. 
Proof: For a fixed time moment {v,R,i}, let v.Old{R,i} denote the set of edges e adjacent to v that 
satisfy v.mark{e){R,i} = OLD and v. status {e){R,i} = SCANNED. Note that v.Sp{R,i} C v.Old{R,i}. 
We prove by induction on time moments {v,R,i} that v.Old{R,i} C v.E{R,l} if z > ^ + 1, and 
v.Old{R,i} C v.E{R - 1, 1} otherwise. 

The induction base is the moment {v,2, 1}. Note that edges are marked as OLD for the first time 
on line 25 of the first invocation (round 1) of the Procedure Dyn^Rnd. However, for an edge e to be 
marked as OLD on line 25 of round 1 of v, it must have appearred in the showup loop of round 1, and 
so e G v.0ld{2, 1} implies e G v.E{l, 1}. 

We next prove the induction step. The discussion splits into a number of cases depending on the 
value of i. 

1. {i = £) 

In this case the induction hypothesis is v.Old{R,£} C v.E{R — 1,1}. The ith processed edge 
e = {v,u) is the last edge processed in the crash-loop of round R. We need to argue that v. Old{R, £+ 
1} C v.E{R,l}. 

Consider an edge e = {v,u) G v.Old{R, i + 1}. Since no edges join the set v. Old during the crash- 
loop, it follows that e G v.Old{R,i}, and thus, by the induction hypothesis, e G v.E{R — 1, 1}. If 
the edge e did not crash between the time {v, R — 1,1} and {v, R, 1} then we are done. If the edge 
e did crash on round i? — 1 of the vertex v then it was detected in the crash-loop of the round R, 
and the variable v.status{e) was set to CRASHED on line 4 of the Procedure CrashRern. Hence 
e v.Old{R, i + 1}, contradiction. (Observe that the time moment {v,R,i + 1} is the moment 
that follows the end of the crash-loop and precedes the beginning of the scan-loop of round R of 
the vertex v.) 

2. {{i <£) or {£ <i <e + k)) 

Edges are never marked as OLD during either the crash-loop or the scan-loop. Hence in both these 
cases v.Old{R,i + 1} = v.Old{R,i}, and if i > £ -h 1 then v.Old{R,i} C v.E{R,l}. Otherwise, if 
i < £ then v.Old{R,i} C v.E{R — 1, 1}. The statement of the lemma follows. 

3. {i = i + k) 

This is the case when the induction hypothesis is v.Old{R,i + k} C. v.E{R,l}, and we need to 
argue that v.Old{R + 1,1} C v.E{R, 1}. 
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Between the time {v, R,i + k} and {v, R + 1,1} the vertex v processes the last edge of round R 
of V (this is done in the scan- loop), and then performs line 25 of the invocation of the Procedure 
Dyn_Rnd of the round R of the vertex v, and lines 1-4 of the invocation of this procedure on round 
i? -I- 1 of the vertex v. The processing of the last ((£ + A;)th) edge adjacent to v in the scan-loop 
of round R does not add any edges to the edges of the set v. Old. The line 25 of the Procedure 
Dyn_Rnd, however, does mark some edges as OLD. On the other hand, all the latter edges were 
necessarily discovered on line 1 of the i?th invocation of the Procedure Dyri-Rnd local at the vertex 
V. Thus, these edges belong to v.E{R, 1}. Finally, the lines 1-5 of the invocation of the Procedure 
Dyn-Rnd on round R + 1 local at v mark no edges as OLD, and thus we are done. 

I 

8.3.3 Quiescence Time 

In this section we show that Algorithm 5 has small quiescence time. 

We start with arguing that in the setting that allows only soft crashes and no incremental updates, 
the quiescence time is just one round (or one time unit if the setting is asynchronous). 

Lemma 8.7 Consider a synchronous network. Suppose that for some pair of rounds R, R' , R < R' , 

the network is stable at the beginning of round R. (See the definition in Section 6.3.) Suppose also that 
(arbitrarily many) soft crashes occur between the beginning of round R and the end of round R' . Suppose 
also that no incremental topology updates occur, and that no topology updates occur starting with the 
beginning of round R' + 1. Then at the beginning of round R' + 2 and later the algorithm maintains a 
{2t — 1) -spanner of the network. 

Proof: For a round R, we will use the notation Sp{R} and E{R} to denote the sets of edges Sp and E, 
respectively, at the beginning of round R. 

Since the network is stable at the beginning of round R, it follows that all edges present in the network 
at this stage are scanned. Moreover, as we have seen, in the semi-decremental setting the only way for 
an edge to stop being scanned is to crash, and thus all edges that are still present in the network in 
the beginning of round R' + 2 arc scanned as well. Consequently, by Lemma 8.5, all these edges are 
spanned by Sp{R' + 2}. Moreover, by Lemma 8.6, Sp{R' + 2} C E{R' + 1}. Finally, by an assumption 
of the lemma, E{R' -t- 1} C E{R' + 2} (because no edge crashes on round R' + 1; in fact, in this case 
E{R + 1} = E{R' + 2}), and so Sp{R' + 2} C E{R' + 2}. This proves that the set Sp{R' + 2} spans all 
edges of the network, and is contained in E{R' + 2}. 

To argue that after the beginning of round R' + 2 the algorithm keeps maintaining a (2t — l)-spanner, 
we note that as no edges crash after the beginning of round R' + 2, edges are not removed from the sets 
Sp and E. Since the network is stable at this point, and no topology updates occur, no edges are added 
into the set Sp from this point on. | 

To extend Lemma 8.7 to the asynchronous setting we first re-state Lemma 8.6 in the following more 
convenient form. 

Lemma 8.8 For a time moment 5, and a vertex v, there exists rj, S > rj > 5 — 1, such that v.Sp{d} C 
v.E{r]}. 

Proof: Let R be the round of the vertex v such that the moment S is between the beginning of the round 
R ol V and the beginning of the round ii -|- 1 of v. The proof splits into a number of cases depending on 
the relation between the time moment S and the time period during which the vertex v is on its round 
R. 
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1. ((5 is before the execution of the Procedure Dyn_Rnd (local at v) ends the crash-loop of round R.) 
Note that since the set v.Sp does not change before the crash-loop starts (that is, does not change on 
lines 1-5 of the Procedure Dyn_Rnd), it follows that between the time that the Procedure Dyn_Rnd 
begins and the time it invokes the Procedure CrashLoop the set v.Sp is equal to v.Sp{R, 1}. 

By Lemma 8.6, v.Sp{5} C v.E{R — 1, 1}. Let r) denote the time moment {v,R — 1, 1}. At most 
one time unit elapses between the time moments {v,R— 1,1} and {v,R,l}. The entire crash-loop 
involves only local computation, and thus, requires zero "distributed time". Consequently, r) > S—1, 
and v.Sp{5} C v.E{r]}, 

2. (6 is after the execution of the Procedure Dyn_Rnd (local at v) ends the crash-loop of round R.) 
By Lemma 8.6, v.Sp{5} C v.E{R, 1}. Let r] be the time moment {v,R, 1}. Since at most one time 
unit elapses between the beginning of round R and the time moment S, it follows that r) > S — 1, 
and so v.Sp{5} C v.E{r]}, proving the lemma. 

I 

Observe that in Lemma 8.8 we assume that local computation requires zero time. Alternatively, one 
can assume that there is a small e > 0, such that all local computations done by a vertex in a fixed round 
require at most e-fr action of a time unit. In this case r] in Lemma 8.8 satisfies a slightly weaker inequality 
d<r]<6-l-e. 

We next extend Lemma 8.7 to the asynchronous setting. 

Lemma 8.9 Consider the asynchronous setting. Let a and a' be two time moments, a < a' . Suppose 
that the network is stable at time a, and that soft crashes occur between the time a and a' , no topology 
updates occur starting from time a' , and no other (incremental) topology updates occur. Fix P = a' + 1. 
Then the algorithm maintains a correct {2t — \)-spanner starting from time j3. 

Proof: All edges present in the network at time a are scanned. Also, all edges that are still present 
in the network at time (3 are scanned as well. (The argument here is analogous to the proof argument 
of Lemma 8.7.) Consider an edge e = (f,ti), and suppose without loss of generality that it is scanned 
by V. Then by Lemma 8.5, the edge e is spanned by Sp{(5}. Moreover, by Lemma 8.5 (Parts 2-4) and 
by Observation 8.3, there is a path 11 that connects v and u in Sp{(5}, has length at most 2t — 1, and 
contains at most one X-edge e' = {v,u'). (This edge e' is necessarily adjacent to the vertex v.) 

Moreover, by Lemma 8.8, there exists a time moment 7, 7 > /3 — 1, such that v.Sp{l3} C v.E{'y}. 
Hence 7 > a', and so no edge crashes between the time 7 and j3. Hence v.Sp{(5} C v.E^^} C v.E{f3^. 
All other edges of the path H are T-edges, and so they belong to v.E{[3} as well. | 

Hence we have shown that in the (pure) semi-decremental setting (when only soft crashes are allowed, 
and incremental updates are not) the quiescence time is one time unit . 

We next extend Lemma 8.9 to a scenario when soft crashes occur in more than one single burst. 

Lemma 8.10 Let ai,a'i,a2,a'2, . . . be a sequence of time moments such that ai < a'^ < a2 < a'2 < . . ., 
and Q!j-|-i > a[ + l for every index i = 1, 2, . . .. Suppose that the network is stable at time ai, and that soft 
crashes occur during the time intervals [ai, a'^], [02, ay, . . . only, and no other topology updates occur. 
Then the algorithm maintains a correct {2t — l)-spanner during the time intervals {a'l, 0.2), (a^ 03), .... 

The proof of this lemma is by a straightforward induction that uses Lemma 8.9 to prove the induction 
step. 

Lemma 8.10 shows that, amazingly, the algorithm takes care of the bursts of semi-decremental topol- 
ogy updates on the fly., no matter how complex is the structure of the update sets. This is in contrast 
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to our results for the incremental topology updates (Corollaries 6.3, 6.5), where some limitations on the 

update sets do exist. 

Moreover, by inspection of the proof of Lemma 8.9 it is easy to verify that incremental updates can 
be introduced, and the analysis extends to this more general scenario. This statement is formalized in 
the following lemma. 

Lemma 8.11 Consider the scenario of Lemma 8.10 with the only change that incremental updates may 
appear at any time. Let Eq be the set edges present at time a\. For i = 1,2, let Ei be the subset of 

Eq that contains the edges that are present in the network during the time period (a', aj+i). (Note that 
edges do not crash during these periods.) Then for every index i = 1,2, . . ., during the period {a[, aj+i) 
the algorithm maintains a correct {2t — 1) -spanner for the subset Ei. 

We next argue that the quiescence time of our algorithm in the semi-decremental scenario is at most 
2t time units, no matter what is the structure of the incremental and decremental topology updates. (As 
long as the latter are soft crashes.) 

We start with proving this for the synchronous setting. 

Lemma 8.12 The quiescence time in the synchronous semi-decremental setting (that allows both incre- 
mental and soft decremental updates) is at most 2 ■ t rounds. 

Proof: Suppose all topology updates occur on round R or before, for some round R> 1. Consider an 
edge e = {v,u) present in the network at the beginning of round i?+ 1. By the proof argument of Lemma 
5.4 (used also in Section 6.2 to analyze the incremental algorithm), the edge e is scanned at the end of 
round R-\- 2t oi earlier. 

Suppose without loss of generality that e is scanned by the vertex v, i.e., v.own{e){R + 2t, END} = 
SELF. Then by Lemma 8.5, the edge e is spanned by the set Sp{v, R + 2t, END}. Consider the path 11 
of length at most 2t — 1 connecting between the endpoints v and u of the edge e in Sp{v, R + 2t, END}. 
By Lemma 8.5 and Observation 8.3, this path contains at most one X-cdgc e' = {v,u'), and moreover, 
this edge (if exists) is adjacent to v. By Lemma 8.6, v.Sp{R-{-2t, END} C v.E{R-{-2t, 1}. It follows that 
e' e v.E{R + 2t, 1}. Since no edge crashes on round R + 2t, it follows that e' G v.E{R + 2t, END}. 

T-edges never crash in this setting, and thus all other edges of n belong to E{v, R + 2t, END} (as 
well as to Sp{v, R + 2t, END}). Hence the edge e is spanned by Sp{v, R + 2t, END}, and all the edges 
of the path spanning it belong to E{v,R + 2t,END}. (Note that since the setting is synchronous, 
E{v, R + 2t, END} = E{R + 2t, END}, and analogously, Sp{v, R + 2t, END} = Sp{R + 2t, END}.) | 

The argument extends to the asynchronous setting. 

Lemma 8.13 The quiescence time in the asynchronous semi-decremental setting is at most 2 • t time 
units. 

Proof: Suppose that no topology update occurs after time a, for some a > 0. Consider an edge e = {v, u) 
present in the network at time a. By the proof argument of Lemma 5.4, the edge e is scanned at time 
(5, for (3 such that a < j3 < a -\- 2t. Suppose without loss of generality that e is scanned by the vertex v. 
By Lemma 8.5, the edge e is spanned at time (3. Moreover, since no edge crashes after (3 (as a < /?), it 
follows that the edge e is spanned at time a + 2t as well. 

Consider the path 11 as in the proof of Lemma 8.8 in Sp{a + 2t}. By Lemma 8.8, there exists r/, 
a-\-2t>r]>a + 2t — 1 such that v.Sp{a + 2t} C v.E{r)}. Since no edge crashes between the time r] 
and a + 2t, it follows that e' € v.Sp{a + 2t} C v.E{a + 2t}. Ah T-edges of IT C Sp{a + 2t} belong 
to E{a + 2t} as well, because they never crash. Hence the path H is contained in Sp{oi + 2t} and in 
E{a + 2t}, and it spans the edge e. | 
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Finally, we strengthen Lemma 8.13, and show that if an edge e = {v, u) is present in the network for 
2t time units, and at least one single time unit elapsed since the time the last soft crash occurred, then 
the edge e is spanned by the spanner maintained by the algorithm. 

Lemma 8.14 Let a he the time when the last (soft) decremental update occurs, and 6 be the time when 
the edge e = {v, u) appears in the network. Suppose that e never crashes after the time 5. Let ^ = 
max{(5 + 2t, a + 1}. Then the spanner maintained by the algorithm spans the edge e starting with the time 

C- 

Remark: Interestingly, the lemma places no restriction whatsoever on incremental updates. As many 
of these updates as one wishes may occur at any time, and the statement of the lemma keeps holding. 
Proof: The crucial observation for this proof is that even when soft crashes are allowed, the proof 
argument of Lemma 5.4 is applicable for an edge e = {v, u) that does not crash itself. Consequently, the 
edge e is scanned at time C because C > <5 + 2t. Suppose without loss of generality that the edge e is 
scanned by v. By Lemma 8.5, the edge e is spanned at time 6 + 2t, and its spanning path 11 C Sp{<^} 
contains at most one X-edge e', and e' (if exists) is adjacent to v. 

By Lemma 8.8, there exists rj, C>ri>( — l>a, such that v.Sp{(} C v.E{r]}. The rest of the 
argument is identical to that of the proof of Lemma 8.13. (It uses the assumption that no edges crash 
during the time interval [??, C])- I 

8.3.4 The Size of the Spanner 

In this section we argue that the spanner maintained by the algorithm is sparse. 

Fix a vertex v. By inspection it is easy to verify that vertices never lose labels in this algorithm (in 
the semi-decremental setting). In other words, each label P that the vertex v ever acquired is stored in 
the table A{v) = v. A, and is never removed from there. Hence the proof argument of Section 5.2 applies, 
and particularly, \T{v)\ < t — 1, and for every index i, i [(t — 1)], the table A{v) contains at most 
one label of level i. Exactly the same arguments as the argument preceding Lemma 5.6 and the proof 
argument of Lemma 5.6 show that the number of edge inserted into X{v) in the scan-loops on all different 
invocations of the Procedure Dyn-Rnd is 0(log^^^^* n ■ • n^/*) with high probability. 

Moreover, whenever an edge e' is inserted into the set X{v) outside of the scan-loops, this can happen 
only on line 11 of the Procedure XReplace (Algorithm 8). However, on this line some other edge e is 
necessarily removed from X{v), and thus, these operations never increase the size of X{v). 

The desired upper bound on the size of the spanner follows. 

Corollary 8.15 The algorithm maintains a {2t — l)-spanner of size 0(t^^^/* • log^^^^*n • n-^+^Z*) in the 
semi-decremental synchronous and asynchronous settings. The guarantee on the size of the spanner holds 
with high probability. 

8.3.5 Local Space and Time Requirements 

In this section we analyze the local space and time requirements for a fixed vertex v that executes 
Algorithm 5. 

Lemma 8.16 The vertex v uses 0{deg{v)) words of storage, each with O(logn) bits. 

Proof: Consider an edge e = {v,u) adjacent to the vertex v. If e is either not scanned or if it is scanned by 
u, then e contributes 0(1) words to the total number of words stored in the data structures of the vertex 



45 



V. Suppose that the edge e = {v,u) is scanned by v. Let P = v.label{e), and B = B{P). Regardless of 
the scan-status of e, words are stored in the different fields v.status{e), v.scan-status{e), v.label{e), 
v.secJabel{e), etc. 

We also need to take into account the words stored in the tables v. A and v.M. If e is a T-edge then 
by lines 11-12 of the Procedure Dyn_Rnd the label P is stored in the tabic v. A. Wc charge this label 
to the edge e. If e is an X-cdgc then by line 17 of the Procedure Dyn_Rnd the value B is stored in the 
table v.M. We charge this value to the edge e. Finally, if e is a D-edge then by line 20 of the Procedure 
Dyri-Rnd, the edge e is stored in the table v.M[B]. This storage space is charged to the edge e. 

It is easy to verify that all storage space used by the algorithm is charged to one of the edges adjacent 
to V, and also, there are 0(1) words charged to every edge e adjacent to v. The lemma follows. | 

We next argue that the time that the vertex v needs to process locally a fixed edge e = (v, u) adjacent 
to on a fixed invocation of the Procedure Dyri-Rnd is small. This processing time will be henceforth 
referred as the local processing time-per-edge (per round). 

If an edge e shows up in the network and its appearance is detected by the vertex v on line 1 of the 
round R oi v (in a fixed invocation of the Procedure Dyn_Rnd local at v), then on the same round the 
edge is processed in time 0(1). Then the edge is processed on the next £ rounds of the vertex v until 
it is scanned, for some £ < 2t — 1. Consider the round on which the vertex v scans the edge e. (It can 
happen that e is scanned by the other endpoint u. In this case the vertex v devotes 0(1) time-per-round 
for processing e for at most 2t rounds, until it receives a message from the other endpoint u informing v 
that the edge e was scanned.) 

If e = {v,u) is T-scanned then its processing (hues 11-13 of the Procedure Dyn^Rnd) requires 0(1) 
time. If e is X- or D-scanned then the execution reaches line 16 and tests whether B = B{P{u)) G v.M. 
As we have seen in Section 5.4, \v.M\ < deg{v), and also, with high probability, \v.M\ = 0{n^^^ ■ 
{t ■ logn)^~^/*). Hence, using the data structure of Beame and Fich [18] with the dynamization tech- 
nique of Andersson and Thorup [5] this test can be carried out in worst-case time 0{a{deg{v))) = 

O (VlHililSfe)' with high probability, in time 0(x(n,t)) = O {^f^^^^). All other 
operations of the execution require only a constant time. 

Consider a set F of edges adjacent to the vertex v that crash, and their crashes are processed by v 
in the crash-loop of a certain round R. We also assume that all these crashes are soft crashes. All not 
scanned edges e & F are processed on lines 1-2 of the Procedure CrashRern, and their processing requires 
0(1) time. The same is true for edges e = {v, u) that are scanned by u. 

For each edge e = {v, u) scanned by v, its scan-status is either D or X. In the former case it is 
processed on lines 5-6 of the Procedure CrashRern. This processing requires accessing the queue v.M[B], 
and this entails going through the data structure of Beame and Fich [18, 5]. Hence the worst-case 
processing time in this case is 0{a{deg{v))), and with high probability, the processing time is 0(x(n,t)). 

Hence we are left with the case that e is an X-edge. In this case the Procedure XReplace is invoked 
on line 8 of the Procedure CrashRern. This procedure fetches edges e' = {v,u') from the queue v.A{[[B], 
B = B (v. label (e)), until it finds an edge not in F, or until the queue v.M[B] becomes empty. For such a 
fetched edge e' G F, we charge the current processing of it (that occurs as a part of processing e) to the 
edge e'. Note that since the edge e' is removed from both v.M[B] right after this processing, each edge e' 
can be processed this way (as a part of processing another edge e) at most once. This processing entails 
accessing the queue v.M[B], and thus requires the worst-case time 0(a(deg(v))), and time 0{x{n,t)) 
with high probability. 

Finally, once a satisfactory edge e' is fetched, the processing of the edge e requires additional 0(1) 
time. In other words, the edge set F of crashing edges adjacent to v is processed by v locally within worst- 
case time 0(|F| • a{deg(v))), that is, in 0(a(deg{v))) time-per-edge. We summarize with the following 
corollary. 
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Corollary 8.17 1. Each edge e = {v,u) that shows up in the network is processed by its endpoints v 

and u for at most 2t rounds, and on each round each endpoint spends 0(1) time to this edge, except 
for one round on which one of the endpoints spends 0{a{deg{v))) time worst-case, and 0{x{n,t)) 
time with high probability, processing this edge. 

2. Each edge e = {y,u) that crashes (assuming e is not a T-edge) is processed by both v and u for one 
round, and each endpoint spends at most 0{a{deg{v))) time worst-case, and 0{x{n,t)) time with 
high probability, processing this edge. 

Finally, we turn our attention back to the dynamic centralized model (see Section 4) , and argue that 
in that model each soft crash can be processed in expected 0(1) time, and with high probability, in 
0{a{h)) time, where h = max{de5(e), log n}. 

For this end the tables v.M = M{v) are maintained in the way described in Section 3.4, using the 
hash table h : [n\ ^ [N], N = 6((t • logn)^~^/* ■ n^/*). As we have seen in Section 3.4, for each vertex v 
and base value B, the expected size of v.M[B] is 0(1), and thus the lookup and deletion operations that 
manipulate the queues v.M\B\ in procedures Dyn-Rnd, CrashLoop and XReplace can be carried out in 

expected time 0(1). Moreover, with high probability, the size of v.M[B] is O , and it is always 

no greater than deg{v). Hence, with high probability, these lookup and deletion operations can be carried 
out in time 0{a{h)), where h = m.a3^{deg{v),\ogn}. For an edge e = {v,u) that experiences a soft crash, 
by definition, the degree of its endpoint v that processes the crash is smaller or equal to deg{e), and this 
h < max{ deg{e), log n}, as required. 

This fills in the gap that was left in our analysis of the dynamic centralized spanner-maintaining 
algorithm of Section 4. 

9 Adapting the Algorithm to the Distributed Fully 
Dynamic Setting 

Our algorithm for maintaining a sparse {2t — l)-spanner in the semi-decrement al setting (Algorithm 5) 
can be extended to maintain a sparse spanner in the fully dynamic setting. For this end we need to 
specify the pseudo-code of the Procedure Crash. Recall that this procedure cannot be possibly invoked 

in the semi-dccrcmcntal setting, because in this setting an execution of the algorithm never reaches line 
11 of the Procedure Crashltern (Algorithm 7). This is, however, not the case in the fully dynamic setting. 

9.1 The Preliminciries 

We first introduce some terminology. An edge e = (v,u) is said to crash really on a round R of the vertex 
V if the edge disappears from the network, and v detects it while executing the crash-loop of its round 
R. Particularly, in this case the edge cannot be used for communication until it re-appears. Note that 
in this case the vertex v sets the status of the edge e to CRASHED, and moreover, this is the only case 
in which the vertex v does so. We say that the edge e = {v, u) crashes virtually on a round R of the 
vertex v if it switches the status of the edge e from SCANNED to NOTSCANNED while executing the 
crash-loop of round R of v. Also, an edge e is said to super-crash on a round i? of t; if e crashes either 
really or virtually on round R oi v. 

We also distinguish the time moments when the edge e crashes physically and crashes really. The 
moment when the edge e disappears from the network is the moment when the edge crashes physically. 
The moment when e crashes really is the moment when the owner of e detects it, and sets its status to 
CRASHED. One of the assumptions of the computational model is that at most one time unit passes 
between these two events. 
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Before describing the Procedure Crash we prove the following lemma that characterizes scenarios in 
which the procedure may be invoked. 

Lemma 9.1 For a vertex v to invoke the Procedure Crash with a parameter P on a round R of v, there 
must exist a self-scanned T -edge e = {v,u) that super-crashes on round R of v. Moreover, v.label{e) = P, 
and L{P) > 1. 

Proof: The Procedure Crash is always invoked from the Procedure Crashltem. The latter procedure 

accepts as input the parameter crash_status that may be equal to cither CRASHED or NOTSCD. If the 
invocation of the Procedure CrashRern that invoked the Procedure Crash has crash_status = CRASHED, 
it means that a T-edge e = {v,u) adjacent to v crashed really. 

Otherwise, if this invocation has crash-status = NOTSCD then the vertex v received the message 
CRASH over a T-edge e = {v,u) adjacent to v, and so in this case the edge e crashed virtually. In both 
cases it holds that {v.status{e) = SCANNED) and {v.own{e) = SELF). Note also that in both cases the 
Procedure Crash is invoked with a parameter P equal to v.label{e). Observe that for a self-scanned T- 
edge e = {v,u), the label v.label{e) of the edge e has level greater or equal to 1. Consequently, L{P) > 1. 
I 

We introduce some additional terminology. Suppose that at some point during the execution of the 
algorithm a vertex v scans an edge e = {v, u), and sets its label P = v.P to u.P + n. In this case we say 
that the vertex v acquires the label P from the vertex u (through the edge e) . 

For a base value B, the cluster B is the set of all vertices v that have an active label P of base B. In 
other words, for a vertex v to belong to a cluster B there must exist a label P G v. A such that B(P) = B. 
A vertex x such that I{x) = B is called the root of the cluster B. 

We say that a vertex u is a parent of a vertex u in a cluster B if both vertices belong to the cluster 
B, and the vertex v acquired its label Py of base B from the vertex u. In this scenario the vertex v is 
said to be a child of u in the cluster B. See Figure 5 for an illustration. 




V 



X 

Figure 5: The vertex u is the parent of v in the cluster B. The label Pv of base B of the vertex v is related 
to the label P^ of the base B of the vertex u by the equation = + n. The vertex x is the root of the 
cluster B. 

Suppose that a vertex v acquired a label P from the vertex u at some point of an execution of the 
algorithm. At some later stage of the execution it may happen that either the edge e or some other edge 
that belongs to the path connecting the root of the cluster B{P) with the vertex v crashes. In this case 
our algorithm ensures that the vertex v will realize that it no longer belongs to the cluster B, and update 
its data structures accordingly. Particularly, if this happens, the vertex v will remove the label P from 
the table v. A of active labels. We will refer to this event by saying that "the vertex v loses the label P". 



48 



Interestingly, in Algorithm 5 for a fixed vertex v and a cluster B, it may happen that the vertex v has 
more than one parent in the cluster B. For example, consider a triangle with vertices v, u, x. Suppose 
that I{x) = 3, I{u) = 2, I{v) = 1, and that the labels 3 and n + 3 = 6 are the only selected labels. (See 
Section 3.1 for the definition of a selected label.) When the edge {x,v) is scanned, v acquires the label 
6 from X, and when the edge (x, u) is scanned, u acquires the label 6 from x. When the edge [v, u) is 
scanned, the algorithm discovers that P{v) = P{u) = 6, but I{v) > I{v), and so P{u) >~ P{v). Since 6 
is a selected label, it follows that the vertex v acquires now the label 9 from u. Altogether, v ends up 
having three active labels 1,6, and 9, and labels 6 and 9 are both of base 3. Consequently, the vertex v 
has two parents in the cluster 3, specifically, x and u. See Figure 6. 




u 



X 

Figure 6: An example of a graph and an execution of the original algorithm in which the vertex v has two 
parents x and u in the cluster 5 = 3. 

We next modify the algorithm slightly to prevent this anomaly, and to guarantee that each vertex 
V will have at most one parent in each cluster B it belongs to. We remark that this anomaly does not 
need to be corrected for our results for the semi-decremental setting to hold. In fact, it is likely that the 
algorithm with this anomaly is good enough for the fully dynamic setting as well. However, the version 
of the algorithm that corrects this anomaly is more convenient for analysis. 

Let B{v.A) = {B \ 3P G v. A s.t. B = B{P)} be the set of base values of active labels of v. 
We modify the lines 10-23 of Algorithm 5, and replace them by the following pseudo-code. All 
references to line numbers in the pseudo-code below refer to Algorithm 5. 
1: if {{ttl{u) > 0) and {B{P{u)) B{v.A)) then 
2: execute lines 11-13 (of Algorithm 5) 
3: else 

4: execute line 15 

5: if {B{P{u)) ^ {v.M U B{v.A))) then 
6: execute lines 17-18 
7: else 

8: execute lines 20-21 
9: end if 
10: end if 

This modification of the algorithm has the following effect. Whenever a vertex v scans an edge 
e = (v, u) with the other endpoint u belonging to one of the clusters to which v belongs, the vertex v 
records the edge e as dropped. The rational of this modification is two-fold. First, it ensures that each 
vertex has at most one parent in each cluster it belongs to. Second, if either of the endpoints of e will 
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lose the label P{u) in future, the fact that the edge e is recorded as a dropped edge will make the vertex 

V to re-scan e. Note that the edge e = {v,u) as above can indeed be dropped "painlessly", because 
its endpoints belong to the same cluster, and thus, by Observation 8.3, the maintained spanner already 
contains a path of length at most 2t — 2 between them. 

This modification affects slightly, however, the size analysis of the constructed spanner. The change is 
in the argument that provides an upper bound on for a fixed vertex v and index i, < i < t ~2. 

(See the proof of Lemma 3.4.) The subsequence a' = {Pj^,Pj^, . . . , Pjg)-, for some £ > 0, is now defined as 
the subsequence of the sequence a that contains only labels Pj^ = P{uj^) of level at most t — 2 such that 
no other labels with the same base appear in u with an index small than jg, and such that B{Pj^) ^ v. A. 
Equipped with this modification, the proof argument of Lemma 3.4 becomes applicable, and the upper 
bounds of Corollaries 3.5 and 3.6 on the size of maintained spanner hold true for the modified algorithm 
as well. 

To summarize, the properties of the original algorithm that were proved in previous sections are 
satisfied by the modified algorithm too, and, in addition, it guarantees the following property. 

Lemma 9.2 For a base value B, the modified algorithm guarantees that the setrs = {{i^,u) \ v.label{e) = 
P, B(P) = B} of edges labeled by labels of base B forms a spanning tree of the cluster B. 

Proof: This set is acyclic because each vertex in the cluster B has at most one parent in B. By definition, 
it spans all the vertices in the cluster B. Let x be the root of B. Given a vertex v in B, let P^ be the 
label of base B in v. A. By a straightforward induction on the level L{Py) of Py it is easy to see that tb 
contains a path connecting the root x with the vertex v. | 

Finally, we introduce to the algorithm one more modification. Specifically, this modification makes 

sure that each vertex v sends some message to each of its neighbors on every round of v. In other words, 
after finishing executing the lines 1-25 of Algorithm 5, the vertex v will check for every edge e = {v, u) 
adjacent to v that satisfies v.status{e) = SCANNED or v.status{e) = NOTSCANNED whether v has 
sent some message to u over e on the current round or it has not. In the latter case v will send the 
message VOID. In addition, on each round the vertex v will await receiving the messages from all its 
neighbors before processing. The messages VOID are discarded right after being received; they are used 
to maintain a certain level of synchronization between neighboring vertices. 

9.2 The Procedures Crash and Update^Label 

We next describe the Procedure Crash. The procedure accepts as input one parameter P that satisfies 

L{P) > 1 (by Lemma 9.1). This parameter is the label of the edge e adjacent to v that super-crashed, 
and whose super-crash triggered the invocation of the Procedure Crash. The Procedure Crash starts with 
invoking the Procedure Update-Label with the same parameter P. The Procedure Update-Label returns 
a label P that becomes the new label P{v) of the vertex v. The new label P is necessarily smaller than 
the label P, and moreover, L{P) < L{P). In addition, P is always taken from the set v. A of active labels 
of V. Observe that since L{P) > 1, and since each vertex z always has the label I{z) of level in its set 
z.A of active labels, such a label P always exists. 

The Procedure Update-Label updates also the table v. A of active labels of v. Specifically, the vertex 

V loses all its active labels that are greater than P. We will describe the Procedure Updatc-Label in 
full detail later in the sequel. After returning from the invocation of the Procedure Update-Label, the 
Procedure Crash enters the for-loop. This for-loop updates the sets v.T and v.X, as well as the statuses 
of some edges e' adjacent to v. In addition, this for-loop propagates the message CRASH over some of 
the edges adajcent to v. 

More specifically, the execution enters the for-loop with each edge e' = (v, z) adjacent to v that satisfies 
the following two conditions. First, the edge e' is necessarily scanned, that is, v.status{e') = SCANNED. 
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Second, the edge e' satisfies one of the following three conditions. Note that these conditions are mutually 
exclusive. 

Condition I: The edge e' is a T-edge and its label is (strictly) greater than the input parameter P of 
the Procedure Crash. 

Condition II: The edge e' = {v, z) is either an X- or a I?-edge, the owner of e' is z, and its label is 

greater or equal to P. 

Condition III: The edge e' = [v, z) is either an X- or a D-edge, its owner is and its second label is 
greater or equal to P. (Recall that P is the label returned by the Procedure Update -Label.) 

If the execution enters the loop with an edge e' = {v,z), it always sets the status of e' (the variable 
v.status{e')) to NOTSCANNED, and sends the message CRASH to z over e'. In addition, if Condition 
I holds then the edge e' is removed from the set v.T. If Condition II holds then no additional operations 
are performed. If Condition III holds then if the edge e' is an X-edge, then the edge e' is removed from 
the set v.X. Otherwise, if Condition III holds and the edge e' is a I?-edge, then e' is removed from the 
set v.M[B'], where B' is the cluster to which the vertex z belonged at the time that the vertex v scanned 
the edge e'. In addition, if the set v.M[B'] becomes empty as a result of the removal of the edge e', then 
the value B' is removed from the set v.M. The pseudo-code of the Procedure Crash follows. 

Algorithm 9 The Procedure Crash{P). 
1: P ^ Update .Label (P) 

2: for every edge e' = {v,z) such that {{v. status {e') = SCANNED) and 

I {{{v.scan_status{e') = T) and {v.label{e') > P)) or 

II {{v .scan-status{e') = X or D) and (y.label{e') > P) and {v.own{e') = PEER)) or 

III {{v.scan_status{e') = X or D) and {v.secJabel{e') > P) and {v.own{e') = SELF)))) do 
3: send the message CRASH to z over e' 

4: v.status{e') ^ NOTSCANNED 
5: if (Condition I) then 
6: V.T ^v.T\{e'} 
7: else if (Condition III) then 
8: if {v.scan-status{e') = X) then 
9: v.X ^ v.X \ {e'} 

10: else 

11: B' ^ B{v.label{e')); v.M[B'] ^ v.M[B'] \ {e'}; v.D ^ v.D \ {e'} 

12: if {v.M[B'] = 0) then 

13: V.M ^ V.M \ {B'} 

14: end if 

15: end if 

16: end if 

17: end for 



To provide some intuition for the algorithm, we next explain which edges e' = (v, z) satisfy one of 
the three conditions (Conditions I, II, and III), and why does the algorithm undertake certain actions for 
each of these edges. 

Condition I: There are two types of edges e' = {v,z), v.label{e') > P, that satisfy Condition I. Let 
P' = v.label{e'). 

First type: In edges of the first type the vertex z is the parent of the vertex v in the cluster B' = B{P') , 
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B' ^B{P). See Figure 7. 




Figure 7: The edge e' is an edge of the first type satisfying Condition I. Both edges e and e' are T-edges 
owned by v. 

Edges of this type are characterized by v.status{e') = SCANNED, v.own{e') = SELF, v.scan_status{e') = 
T, and v.label{e') = P' > P. Observe that as P and P' are both active labels of v at this point of the 
execution, and P' > P, it follows that L{P') > L{P). (Recall that a vertex may have at most one active 
label of any given level.) 

In this case when the edge e' was scanned, the vertex v was already labeled by P. (In other words, 
P belonged to the set v. A at the time when v scanned the edge e'. This follows since v never acquires 
a label P" that is smaller than one of its active labels.) Let P{v) denote the label of v at that time. It 
follows that P{v) > P. However, as a result of the current invocation of the Procedure Crash, the vertex 
V loses the label P and all its other active labels greater than P. Consequently, the edge e' needs to be 
re-scanned. 

To implement this intuition, the algorithm removes the edge e' from the set v.T, switches the status 
of e' to NOTSCANNED, and sends the message CRASH to z over e'. The latter two operations are 
done for all edges e' for which the execution enters the loop (lines 3-4 of Algorithm 9). We will call these 
operations the standard operations. 

Second type: In the edges of the second type the vertex 2; is a child of the vertex v either in the cluster 
B = B{P), or in a cluster B' = B{P'), P' > P. See Figure 8. 




Figure 8: The edge e' is an edge of the second type satisfying Condition I. Both edges e and e' are T-edges. 
The edge e is owned by v, and the edge e' is owned by z. 

Edges of this type are characterized by v.status{e') = SCANNED, v.scan_status{e') = T, v.own{e') = 
PEER, v.label{e') = P' > P. If B{P') = B{P) = B then z is a child of v, and visa, child of u in the 
cluster B, and thus L{P') (respectively, L{P)) is the distance between the root r of the cluster B and 
the vertex z (resp., v). Hence in this case L{P') = L{P) -|- 1 > L{P). 
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If B(P') / B{P) then the argument that shows that L{P') > L{P) is shghtly more elaborate. We 
first introduce the following notation. For a vertex x and a cluster (3 such that x E (3, let P/six) denote 
the active label of the vertex x that has base /?. 

Consider the labels Pb(,v) and Pb'{v), B = B{P), B' = B{P'). We note that Pb{v) = P, and 
P' = Pb'{v) + n. Both labels Pb{v) and Pb'{v) belong to the set v. A of active lables of v at the time 
when the vertex v processes the super-crash of the edge e. 

Claim 9.3 Pb'{v) > Pb{v) = P. 

Proof: Since B / B', it follows that Pb'{v) Pb{v). Suppose for contradiction that Pb'{v) < Pb{v)- 
Since Pb' {v) and Pb{v) belong to the set v. A simultaneously at some point fo the execution, it follows that 
L{Pb'{v)) < L{Pb{v)), and so Pb'{v) < PB{v)-n. However, P' = PB'{v) + n, and thus P' < Pb{v) = P. 
This is a contradiction to Condition I. | 

Hence L{P') = L{Pb'{v)) + 1 > L{P) in this case too. Since at the time when the edge e' was scanned, 
the label of the vertex v was Pb'{v), it follows from Claim 9.3 that the label of v at that time was greater 
or equal to P. (It was equal to P if and only if B = B' .) Since now the vertex v loses the label P, and 
all its other labels that are greater or equal to P, it follows that, in particular, it loses the label Pb'{v). 
Hence the edge e' needs to be re-scanned. To this end the algorithm undertakes the same operations as 
for edges of the first type that satisfy Condition I. 

Condition II: There are two types of edges e' = {v, z) that satisfy Condition II. 

First type: Edges of the first type connect a neighbor z of to one of the clusters B' to which the 
vertex v belongs. Moreover, for each edge e' of this type, the label P' of the edge e' (i.e., P' = v.label(e')) 
satisfies P' > P. Also, the edge e' is either an X- or a D-edge, and it is scanned by z. See Figure 9. 




Figure 9: The edge e' is an edge of the first type satisfying Condition II. The edge e is a T-edge, and it is 
experiencing a super-crash. The edge e' is an X- or a D-edge, owned by z, and its label P' = v.lahel{e') is 
greater or equal than the label P of v. 

The edge e' was scanned by the vertex z, and z discovered that its current label is smaller than the 
label P' of the vertex v. Currently, as a result of a super-crash of the edge e, the vertex v loses both 
labels P and P' . Hence the edge e' has to be re-scanned. For this end the vertex v sends to z over the 
edge e' the message CRASH, and sets the status of e' to NOTSCANNED (that is, performs the two 
standard operations). 

We note also that the labels P and P' both belong to v. A at the time when the edge e super-crashes. 
Since P' > P then either P' = P or L(P') > L(P). 

Second type: Edges of the second type that satisfy Condition II are £)-edges e' = (f , z) that are 
scanned by z, and such that when the vertex z scanned e' it discovered that B{P{v)) G z.A. As a result 
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the edge e' was dropped. Let P{v) (respectively, P{z)) be the label of v (resp., z) at the time when the 
vertex z scanned the edge e'. Note that necessarily P{z) -< P{v). See Figure 10. 
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Figure 10: The two possible configurations of edges e' = {v, z) of the second type that satisfy Condition II. In 
both configurations these are dropped edges connecting two endpoints v and z belonging to the same cluster 
B. In the first configuration z is an ancestor of v in B, and in the second configuration the edge e' connects 
two different branches of the spanning tree of B, but z is no farther from the root of B than v. 

Note that v.lahel{e') = P{v) = P' . Since P{v) > P, and because the vertex v loses the label P{v) as 
a result of a super-crash of the edge e, it follows that the edge e' has to be re-scanned. To accomplish it, 
the two standard operations are undertaken in this case too. 

The same argument as the one we used for the edges of the first type that satisfy Condition II shows 
that either P' = P ov L{P') > L{P). 

Condition III: Like for Conditions I and II, edges e' = {v, z) that satisfy Condition III can be of two 

types. 

First type: Edges e' of the first type connect the vertex v with a cluster B^. These edges are either X- 
or D-edges. Also, edges e' = {v, z) of this type were scanned by the vertex v while the label of v was P or 
greater. Currently, as a result of the super-crash of the edge e, the label of v decreases and becomes P. 
Consequently, the algorithm needs to re-scan edges of this type. The label of v at the time of scanning 
the edge e' is recorded in the variable v.secJabel{e'). See Figure 11. 



Figure 11: The edge e' is an edge of the first type satisfying Condition III. It is either an X- or a D-edge 
owned by v. Its label is the label Pz = Pb^{z) of the vertex z in the cluster Bz, and its second label is the 
label of V at the time that v scans the edge e'. 



Remark: It may look counter-intuitive that the vertex v needs to re-scan edges e' that it scanned while 
having the label P, even though v does not lose the label P as a result of the super-crash of e. (The 
vertex v loses all labels strictly greater than P.) The algorithm nevertheless re-scans these edges for the 
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following reason. If an edge e' were to stay in the set v.X, the cardinality of v.X may have exceeded 
the desired bound of 0{{t ■ logn)^-^/* ■ n^/*). Indeed, recall that v.X = X{v) D Ui=o X'^'H^)- (See the 
notation of Section 3.2 and Lemma 3.4.) Let iq = L(P), and consider the set X^^°\v). Consider the 
sequence ij of all edges rj = (ei,e2, . . . ,6^), for some integer fc > 0, that arrived during the time period 
that the condition L{P{v)) = zq was satisfied, and such that the label P{v) did not grow as a result 
of processing these edges. Note that it is not necessarily true that contains only edges from 

the sequence rj, and thus the proof argument of Lemma 3.4 would not carry over for our fully dynamic 
algorithm, unless edges e' with second label P are re-scanned. 

We continue the analysis of edges of the first type satisfying Condition III. For an edge e' of this type, 
its scan-status is either X or D, its owner is v, and its second label is greater or equal to P. The label 
v.lahel{e') is set to the label of z at the time when the vertex v scanned the edge e' . We denote this label 
by P.. 

For edges of this type the two standard operations are executed. In addition, if e' is an X-edge then 

the edge is removed from the set v.X. Otherwise, the edge e' is a Z?-edge, and in this case it is removed 
from the set v.M[Bz\, = B [v. label {e')) = B(Pz). Moreover, if as a result of removing the edge e' from 
the set v.M[Bz] the latter set becomes empty, then the value B^ is removed from the set v.M. 

Second type: The edges e' = (v, z) of the second type that satisfy Condition III are D-edges that 
connect two vertices of the same cluster B. See Figures 12 and 13 for an illustration. 
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Figure 12: Two possible configurations of edges e' = {v,z) of the second type that satisfy Condition III. In 
both configurations the edge e' is a D-edge owned by v. 

An edge e' = [v, z) of this kind satisfies v.label{e') = P{z), v.secJabel{e') = P{v), where P{v) (respec- 
tively, P{z)) is the label of v (resp., z) at the time that v scans the edge e'. In addition, v.secJabel{e') > P, 
and v.own{e') = SELF. 

In this case the algorithm proceeds exactly in the same way as it does for edges of the first type that 
satisfy Condition III. 

We remark also that in contrast to edges that satisfy Conditions I and II, for edges e' that satisfy 
Condition III it is not necessarily true that L{P') > L{P). 

We next describe the Procedure Update-Label. Recall that this procedure is invoked from the Proce- 
dure Crash, and it accepts as input the input parameter P of the Procedure Crash. The parameter P is 
necessarily an active label of the host vertex v, i.e, P G v. A, and moreover, L{P) > 1. (The host vertex 
of an algorithm is the vertex that runs the algorithm). 

In the Procedure Update-Label the vertex v loses the label P, as well as all its other active labels that 
are greater than P. It then adapts the largest label P still left in v. A as its current label P{v). This label 
is returned by the procedure. Observe that each vertex v always has the label I{v) of level present in 
v.A, and thus the set v. A is never empty. 

The pseudo-code of the Procedure Update_Label is presented below. The word VOID is used to 
denote the default value; if a value of a variable is equal to VOID it means that the variable contains no 
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Figure 13: Two more possible configurations of edges e' = {v,z) of the second type that satisfy Condition 
III. The cluster B (respectively, B') is depicted by solid (dashed) lines, and the edge e' is depicted by dotted 
lines. 

Like in Figure 12, the edge e' is a D-edge owned by v, but in contrast to Figure 12, the edge e' = {v,z) 
connects two endpoints from a cluster B' ^ B. Note that it may happen that P > v.secJabel{e') > P. 



meaningful data. 

Algorithm 10 The Procedure Update -Label {P) . 
1: for every label P' G v. A, P' > P do 
2: v.A[L{P')] ^ VOID 
3: end for 

4: v.P ^ max{P* | P* G v.A} 
5: return(t;.P) 



This completes the description of the fully dynamic algorithm for maintaining sparse spanners. We 
conclude this section with a number of remarks. 

Remark: The algorithm can be simplified so that each X- or D-edge adjacent to a T-edge that super- 
crashes is re-scanned. This change does not affect the worst-case efficiency of our algorithm. However, 
it seems that in many cases this simplified version of the algorithm will re-scan much more edges than 
needed (or, rather, than the algorithm presented above re-scans). 

Remark: Note that in the algorithm presented above a vertex v may invoke the Procedure Crash many 
times on the same round. This may cause the vertex v to send more than one message CRASH through 
a fixed edge e adjacent to f on a fixed round. We observe, however, that messages CRASH do not carry 
with them any additional information, and thus all these multiple messages can be replaced by just one 
single message CRASH sent through each edge e as above. A simple way to implement this is to maintain 
a variable Pmin initialized as oo. Each time v wishes to invoke the Procedure Crash with a parameter P 
it compares P with -Pmin, and sets Pmin to be equal to the smaller value among these two values. At the 
very end of the crash-loop the vertex v invokes the Procedure Crash with the parameter Pmin, unless the 
latter is equal to oo. For convenience, we will ignore this issue in the analysis, and analyze the (simpler) 
version of the algorithm that is given by the pseudo-code. 

Remark: Interestingly, a vertex v may receive a message {P(u), ttl{u)) from a neighbor u oi v over an 
edge e = (w, u) on a round P of u on which it sends the message CRASH to u over e. We observe that this 
message {P{u), ttl{u)) was sent by u before u knew of the virtual crash of the edge e, and consequently, 
this message may contain irrelevant information. (Particularly, if u will lose the label P{u) on the next 
round as a result of the message CRASH just sent by v.) 

However, in our algorithm the vertex v processes the message {P{u), ttl{u)) as usual, and does not 
discard it. As a result, it may happen that the record of the edge e local at v will contain not up-to-date 
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information. The approach that the algorithm employs to handle this anomaly is based on the observation 
that when u receives the message CRASH from v, it realizes that the edge e is scanned incorrectly, and 
informs v of this fact. 

Remark: A vertex v may send the message CRASH to its neighbor u over the edge e = (v, u) on a 
round R, and also send the message {P{u), ttl{u)) to u over e on the same round. Observe that once 
V sends the message CRASH over e it sets its status to NOTSCANNED (lines 3-4 of the Procedure 
Crash). Then on line 25 of the Procedure Dyn^Rnd (Algorithm 5; see also Algorithm 4) v sends the 
message {P{v), ttl{v)) to u. Obviously, sending these two messages over the same edge on the same round 
causes no congestion problem, because the message CRASH requires only a constant number of bits. 
These two messages will be sent as a single message, to make sure that they arrive at their destination 
simultaneously even in the asynchronous setting. 

Similarly, a vertex v may send the message CRASH and a message SCANNED to the same neighbor 
It of f on the same round R. This may happen if v receives a message {P{u), ttl{u)) from u on round R, 
and as a result, v processes the edge e = {v,u) in the scan-loop. 

Note, however, that messages SCANNED and {P{v), ttl{v)) are never sent over the same edge e on 
the same round. To justify this claim we note that for v to send a message SCANNED over e, it must 
enter the scan-loop with e. However, if v enters the scan-loop with e, when it ends the scan-loop the 
variable v.status{e) is equal to SCANNED. However, the vertex v sends the message {P{v), ttl{v)) only 
over those edges e that satisfy that v.status{e) = NOTSCANNED at the time when the scan-loop ends. 
(See line 25 of Algorithm 5, and line 14 of Algorithm 4.) 

We next describe the behavior of a vertex v that receives two messages over the same edge e = {v, u) on 
the same round R of v. Suppose first that v receives the message CRASH and the message {P{u), ttl{u)) 
on round R of v. If v.status{e) = SCANNED then, by lines 2 and 7 of Algorithm 5, the algorithm 
ignores the message {P{u),ttl{u)). If v.status{e) = NOTSCANNED then, by lines 1-2 of Algorithm 7, 
the algorithm ignores the message CRASH. Specifically, it does not invoke the Procedure Crash, but 
rather sets v.status{e) to NOTSCANNED again, and proceeds to the scan-loop to process the message 
{P{u),ttl{u)). 

The more complicated case is when the vertex v receives the message CRASH and the message 
SCANNED{scan-status, P, P') on the same round. As we have seen, in this case the vertex u produced 
first the message CRASH during its crash-loop, and later in the scan-loop, it produced the message 
SCANNED. In this case, for consistency, it is desirable that the algorithm local at the vertex v will first 
process the message CRASH, and only then process the message SCANNED. For this end we need to 
change slightly the pseudo-code of Algorithm 5. Specifically, the for-loop of lines 3-5 will process only 
messages SCANNED that arrived alone, that is, with no message CRASH attached. In addition, right 
after the crash-loop the algorithm will execute the for-loop of lines 3-5 again, but this time only for edges 
e over which both messages CRASH and SCANNED were received. 

An alternative approach is to discard each message {P{u), ttl{u)) or SCANNED that arrives in con- 
junction with the message CRASH, and to process only the message CRASH. It will be apparent from 
the analysis of Section 9.3 that the quiescence time of the algorithm is bounded by 3t even if some of 
the messages {P{u), ttl{u)) or SCANNED fail to arrive. It is, however, crucial for all messages CRASH 
that are sent to arrive, and also, it is important that the algorithm will not get stuck waiting for one of 
the missing messages {P{u), ttl{u)) or SCANNED. The latter does not happen if the "missing" message 
arrived in conjunction with the message CRASH, and was discarded. 
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9.3 Analysis 

9.3.1 The Quiescence Time 

In this section we analyze the quiescence time of the fully dynamic algorithm presented in the previous 
section. 

The following lemma shows that a vertex cannot self-scan the same edge for two rounds in a row. 

Lemma 9.4 For a vertex v, and an edge e = (v,u) adjacent to v, and a round R of v, the vertex v 
cannot possibly self-scan e on rounds R and R + 1 of v. 

Proof: If V self-scans the edge e = (v, u) on round i?, it holds that v. status (e){R, END} = v. status (e){R+ 
1} = SCANNED. For v to self-scan the edge e on round R+1 too, it must hold that v. status (e) {R+1} = 
NOTSCANNED, and thus the lemma follows. | 

We next prove a technical lemma that asserts that the data structures of neighboring vertices are 
consistent to a certain extent. To formulate the lemma, the following notation is needed. For a vertex v 
and a round R of v, the time moment {v, R, CRASH} is the time moment when the vertex v starts the 
crash-loop of its round R. The notation v.T{R, CRASH} stands for the value of the variable v.T at time 
{v,R, CRASH}. 

Lemma 9.5 Consider the synchronous setting, and an edge e = {v, u). Suppose that v. status {e){R, CRASH} = 
SCANNED, v.scan_status{e){R, CRASH} = T, v.own{e){R, CRASH} = SELF, and that the ver- 
tex V receives the message CRASH from the vertex u over e on round R. Then u.status{e){R — 
1, CRASH} = SCANNED, u. scan. status {e){R - 1, CRASH} = T, u.own{e){R - 1, CRASH} = PEER, 
and u.lahel{e){R - 1, CRASH} = v.label{e){R, CRASH}. 

Proof: Let R' denote the maximum number of round, R' < R, on which the vertex v self-scanned the 
edge e. We note that the vertex v could not scan the edge e on round R before the crash-loop starts, 
because v receives the message CRASH over e on round R. Hence, even if the vertex v receives the 
message CRASH along with a message SCANNED over the edge e on round R, nevertheless, v enters 
the crash- loop before processing the message SCANNED. 

Hence R' < R — 1. We next argue that R' < R — 1. Suppose for contradiction that R' = R — 1. In 
this case it follows that the vertex v executes the following operations. 

1. It receives the message CRASH on round R from u over the edge e. 

2. It self-scans the edge e on round R—1. 

3. It receives a message (-P(n), ttl{u)) on round R — 1 from u over the edge e. 

To justify the statement 3, we note that v needs to receive a message {P{u), ttl{u)) on round i? — 1 to 
self-scan the edge e T-edge on round R — 1. 

Also, it follows that the vertex u executes the following operations. 

1. It sends the message CRASH to v on round R — 1. 

2. It sends the message {P{u), ttl{u)) to v on round R—2. (This follows from the statement 3 regarding 
the vertex v.) 

Also, since the vertex u executes the operation 1, the vertex u must enter the for-loop of the Procedure 
Crash with e on round R-1. Hence, u.status{e){R - 1, CRASH} = SCANNED. 
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Since a message {P{u), ttl{u)) is sent by u on line 25 of Algorithm 5, it follows that for the vertex u 
to execute operation 2 it must satisfy u. status {e){R — 2, END} = NOTSCANNED. Since u. status {e){R — 
2, END} = u.status{e){R-l}, it follows that u. status {e){R-l} = NOTSCANNED. However, u. status {e){R- 
1, CRASH} = SCANNED. Note that no edge e is ever self-scanned by a vertex u between the beginning 
of a roTind and the beginning of the crash-loop of the same round. Hence, u.own{e){R — 1, CRASH} = 
PEER, i.e., the vertex u peer-scanned the edge e on round R — 1. Hence the vertex v self-scanned e on 
round R — 2, and sent a message SCANNED to u on round R — 2. By the operation 2 of the vertex v, 
the vertex v also self-scans e on round R — I. By Lemma 9.4, this is a contradiction. 

Hence R' < R — 2. The vertex v self-scans the edge e on round R', and sends the message 
SCANNED(T, P{v), P{u)) to u on round R' . Hence, the vertex u processes this message on lines 
3-5 of Algorithm 5 of round R' + 1 < R - I, and it follows that u. status {e){R' + 1, CRASH} = 
SCANNED, u.scan.status{R'+l, CRASH} = T, u.own{e){R'+l, CRASH} = PEER, and u. label {e){R'+ 
1, CRASH} = v.label{e){R, CRASH}. (For the last equality note that by the maximality oiR', v.lahel{e){R' , CRASH 
v.label{e){R, CRASH}). 

To complete the proof we argue that the record of the edge e local at the vertex u does not change 
between the time moments {u, R' + l, CRASH} and {u,R-l, CRASH}. First, observe that HR' = R-2 
then we are done. Hence we are left with the case that R' < R — 3. However, since e is a T-edge, for its 
record to change it must super-crash on a round R, R' + l < R < R — 1. (Note that if e super-crashes 
on round i? — 1, it does so during the crash-loop, and so its super-crash has no effect on the value of 
u.label{e){R — 1, CRASH}.) If the edge e super-crashes on round R, the vertex v detects this super- 
crash on round R, R E {R, R + 1}. However, since by an assumption of the lemma, at time moment 
{v, R, CRASH} the record of the edge e local at v indicates that the edge is scanned, it follows that v 
scans the edge e on a round R, R < R < R. However, R>R>R>R>R' + l, i.e., R > R > R' , 
contradicting the maximality oi R'. | 

We next extend Lemma 9.5 to the asynchronous setting. 

Lemma 9.6 Consider an asynchronous network, and an edge e = {v,u). Suppose that at a certain 
time moment ay it holds that v. status (e) {ay} = SCANNED, v. scan status {e){av} = T, v.own(e){av} = 
SELF, and that the vertex v receives the message CRASH from u over e, and starts processing it at 
time a^. Let au be the time moment when the other endpoint u of e has sent the message CRASH 
over e. Then u. status {e){au} = SCANNED, u.scan-status{e){au} = T, u.own{e){au} = PEER, and 
u. label {e){au} = v.label{e){av}. 

Proof: Let /3 be the maximum value such that l3 < and the vertex v scanned the edge e at time /?. 
Let 7 be the maximum value such that 7 < and the edge e appears in the graph at time 7. If 7 > /3 
then V re-scanned the edge e at time S, for some S,P<'y<6<ay, contradicting the maximality of /3. 
Hence 7 < /? < a^. 

Let Ry (respectively, be the first round of v (resp., u) that starts after time 7. The vertex v 
(resp., u) sets the status of the edge e to NOTSCANNED on round R^ (resp., Ru), and sends its first 
message to u (resp., v) on its round Ry (resp., Ru). The vertex v (resp., u) receives the first message 
from u (resp., v) on its round Ry + I (resp., Ru + 1). Note that by definition of 7, the edge e does not 
crash really during the time interval (7,0;^]. Hence the vertices v and u correspond continuously during 
this time interval. 

Let ^ be the time moment on which the edge e crashes really for the first time after the time moment 
7. (It may happen that ^ = 00 if e never crashes really after time 7.) For a positive integer j > 1 we say 
that the vertex v (resp., u) sends (or receives) a message to (or from) the vertex u (resp., v) on round 
j with respect to the edge e = {v,u) (after ^), if it does so on its round Ry + j (resp., Ru + j), and it 
happens before the time moment ^. 
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In this scenario, for a round j with respect to the edge e, we denote by {v,e,j, CRASH} the time 
moment on which the vertex v is on round j with respect the edge e, and the execution of the Procedure 
Dyn_Rnd local at v is at the beginning of the crash-loop. 

Let j, j > 2, denote the number of round with respect to the edge e on which the vertex v receives the 
message CRASH from u at time a^. In other words, using the notation that we have just defined, the time 
moment {v, e,j, CRASH} is equal to the time moment a^,,. Following the proof argument of Lemma 9.5 wc 
conclude that u.status{e){u,e,j — 1, CRASH} = SCANNED, u. scan-status{e){u, e, j — 1, CRASH} = T, 
u.own{e){u,e,j-l, CRASH} = PEER, and u.labd{e){u,e,j -1, CRASH} = v.labd{e){v,e,j, CRASH}. 
The time moment {u, e,j — 1, CRASH} is equal to a„, completing the proof. | 

Note that in Lemma 9.6, — 1 < < a^,. 

We next use Lemma 9.6 to analyze the quiescence time of our algorithm. 

Lemma 9.7 Let a, a >0, be a time moment, and e = {v,w) be an edge owned by v that super-crashes 
at time a. Let L{e) denote the level of the label of e local at v at time a, i.e., L{e) = L {v. label (e) {a}). 
Then there exists an edge e that crashes really at time P, P > a — (t — l). Moreover, if at time a the edge 
e is a T-edge, then the same statement applies with fi > a — {L{e) — 1). 

Proof: If the edge e crashes really at time a then we are done. Hence we are left with the case that 
e crashes virtually at time a, that is, the endpoint v switches the value of the variable v.status{e) from 
SCANNED to NOTSCANNED at time a. 

Let R = v.R{a} denote the round on which the vertex v is at time a. Denote ei = e = (zq,zi), 
zq = u, zi = V, ai = a. For the edge e to crash virtually on round R oi v there must exists a T-cdge 
62 = {zi,Z2), z\ = V, adjacent to zi and owned by zi that super-crashes on round i? of zi = v. If the 
edge 62 crashes really on round R of zi then we are done. Otherwise, 62 crashes virtually on round R of 
zi. In other words, the vertex Z2 sends the message CRASH to Zi over the edge 62, and zi receives this 
message at time a = ai. Note that it may be the case that e = ei = 62, and then the message CRASH 
was received by the vertex zi over the edge e itself, and Z2 = zq. In any case, however, the message 
CRASH was sent by Z2 to zi over 62 at time 0:2 > ai — 1. 

First, we consider the case that ei ^ 62 (and, consequently, zq ^ 22)- In this case zi. status (62) {ai} = 
SCANNED, zi.scan_status(e2){ai} = T, zi.own{e2){ai} = SELF. Let P2 = zi. label {e2){ai}. By 
Lemma 9.6, Z2- status (62) {02} = SCANNED, Z2.scan-status{e2){a2} = T, 2:2. own (62) {02} = PEER, and 
Z2. label (62) {a2} = P2- 

In addition, for the vertex Z2 to send the message CRASH over a T-edge 62 at time a2, it must 
have invoked the Procedure Crash with a parameter P2 on round R2 = Z2.R{a2}- Moreover, since 
Z2.scan_status{e2){a2} = T, by Condition I of the Procedure Crash it holds that < -^2- Furthermore, 
by the argument that follows the description of Procedure Crash in Section 9.2, L^P!^) < L{P2). (See the 
subsection devoted to Condition I.) 

Since the vertex Z2 invokes the Procedure Crash with the parameter P2 at time 02, it follows that there 
exists an edge 63 = (z2,Z3) that super-crashes at time a2. Moreover, Z2- status (e^) {02} = SCANNED, 
Z2-Scan-Status{es){a2} = T, Z2-own{e3){a2} = SELF, and Z2- label {e2){a2} = P2- We denote P3 = 
Z2 ■ label (es) {02}, and more generally, Pj+i = Zj.label{ej.^i){aj}, ior j = 0,1,...,^ — 1, where £ is a 
positive integer to be specified in the next paragraph. 

By employing this argument inductively we conclude the following statements. 

1. The vertex zi invokes the Procedure Crash at time a = ai, and the edge 62 = {zi,Z2) super-crashes 
at time ai. 

2. There is a sequence of edges, called a crash-path of the edge e = ei, a = (62,63, . . . ,6^), I > 2, 
e-j = (zj-i,Zj) for j = 2,3, and a sequence of values ai, 02, . . . , a^-i, ai > a2 > • ■ ■ > 
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ai - crash-time of 62 




62 
it Z2 

<i ^3 



ai-i - crash-time of ei 

41 Z£-l 

Figure 14: The crash-path of the edge e = e\. The edge crashes really. 

aj_i > aj > Qj_i — 1 for j = 2,3,...,^, such that 2j_i.siaius(ej){aj_i} = SCANNED, 
Zj-i.scan_status{ej){aj-i} = T, Zj-i.own{ej){aj-i} = SELF, and each edge ej super-crashes at 
time aj-i, j = 2,3, . . . ,£. 

3. The edge crashes really at time a^-i- 

See Figure 14 for an illustration. 

It also holds that L{P2) > L^P^) > ■ ■ ■ > L{P(), and L{P2) = L{zi.label{e2){ai}) <t-l. Also, since 

Pi = Z£^i.label{e£){a£-i} , and is the owner of the T-edge ee, it follows that L{Pi) > 1. Hence the 
sequence {P2,P'i, ■ ■ ■ ,Pe) is of length at most t — 1, and £ < t. The edge e = crashes really at time 
P = ae-i > a - {£ - 2) > a - {t - 2). 

Consider now the complementary case that e = e.\ = e.2- In this case the endpoint Z2 of e sent the 
message CRASH at time 02 > — 1, and Z2 did it as a result of an invocation of the Procedure Crash, 
local to Z2 at time 02- Note that in this case the edge 62 is not necessarily a T-edge at time a2- This is 
in contrast to the first case when the edge 62 is always a T-edge. 

For the vertex Z2 to invoke the Procedure Crash at time a2, there must exist an edge 63 = (22,^3) 
adjacent to Z2 that super-crashes at time ^2, owned by Z2, and 63 is a T-edge at time 02- From this 
point on the same argument that we used in the first case applies for the T-edge 63. The T-edge 63 
super-crashes at time a2> ai — 1, and consequently, the edge = e crashes really at time (3 = a^^i > 
a - {£-2)>a - (t-l). 

Moreover, suppose now that, in either of the two cases considered above, the edge ei is a T-edge. 
Then /3 = ae-i >a — {£ — 2)>a — (^(^2) — !)• If ei = 62 = e then T2 = Pi, and we are done. If ei / 62 
then by a previous argument, T(Pi) > L{P2), and (5 > a — (T(Pi) — 1). | 

In the context of the last proof we remark that there may be more than one crash-path for a given 
super-crash of an edge e. 
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We need some additional terminology. Fix a time moment a, and consider a vertex w that belongs 
to a cluster B. Let x (^V he the root of the cluster B. Then the acquire-path IIb{w) of the vertex w in 
the cluster B is the unique path connecting the vertices x and w in the spanning tree of the cluster B. 
At a time moment a, the time-stamp of the acquire-path I[b{u)) is the largest time moment no greater 
than a on which the vertex w scanned the edge e that is adjacent to w and belongs to the path, and as 
a result the vertex w joined the cluster B. 

Recall also that for an edge set H and an edge e = {v,u), we say that H spans e if distniv, u) < 2t — l. 
(See Section 5.3.) 

Lemma 9.8 In an asynchronous network, for some time moment 7, suppose that no edge crashes really 
at time 7 or later. Suppose that for a time moment a, a > 7 + (i — 1), it holds that v. status (e) {a} = 
SCANNED, and v.own{e){a} = SELF. Then the following two statements hold. 

1. The edge e is spanned by Sp{a}. 

2. For any time moment 6, 6 > a, the edge e is spanned by Sp{S}. 

Proof: Consider an edge e = {v,w) that satisfies the assumption of the lemma. We start with proving 
statement 1. 

If e G Sp{a} then we are done. Otherwise, v.scan-status{e){a} = D. Let e' = {v, w') G v.X{a} he the 
edge that satisfies that B {v. label (e) {a}) = B{v.label{e'){a}). Let P = v. label (e) {a}, P' = v.label{e'){a}., 
and B = B{P) = B{P'). Such an edge exists by Lemma 8.5(4). 

Let I\.b{w) = (x = wq, wi, . . . , Wfi = w), (for some /i > 0, and x such that I{x) = B), be the acquire- 
path of w with respect to B with the largest time-stamp smaller or equal than a. Let Cj = {wi,Wij^i) 
for i = 0, 1, . . . , /i — 1. The path IIb{w') is defined analogously, IiB{w') = {x = w'q, w'l, . . . ,Wg = w'), for 
some 5 > 0, and = {w[,w[j^-y)., for z = 0, 1, . . . , 5 — 1. 

Observe that all edges of the set {e} U IIb{w) U JlBiw') were all inserted into the set Sp on or before 
time a, and thus one of them super-crashed no later than at time a. Moreover, e' G 5p{a}, and thus the 
edge that super-crashed belongs to the set IiB{w) U YiB{w')- 

For some index i = 0, 1, . . . , ^—1, if the edge Cj G ^b{v) super-crashes at time ^ = ^j, then e^+i super- 
crashes at time ^j+i < ^^-1-1, and the edge eh-i super-crashes at time ^h-i < ^i + ih—l — i) = ^+{h—l—i). 
Furthermore, the edge e super-crashes at time ^* < + {h — i). See Figure 15 for an illustration. 

Since v. status (e) {a} = SCANNED it follows that a = + (h — i). Consequently, the edge Cj 
super-crashes at time ^, ^ > a — {h—i). The edge is a T-edge, and the level of Cj at time it super-crashes 
is L{ei) = i + Hence, by Lemma 9.7, there exists an edge e that crashes really at time r), 

V > ^ - (Hei) -l)=^-i>a-h 
> a - (t - 1) > 7 . 

However, no edge crashes really after time 7, contradiction. If an edge e'j G IIb{w'), j = 0, 1, . . . , y — 1, 
super-crashes, a contradiction is derived by the same argument (using that v. status (e) {a} = SCANNED). 

We next prove the statement 2 of the lemma. Consider an edge e = {v, w) that satisfies the assumption 
of the lemma, and consider a time moment 5, 5 > a > 7 + (t — 1). Note that the edge e is owned by v 
at time a. The proof splits into a number of cases according to the value of v.scan_status{e){a}. 

In the first case v.scan-status{e){a} is equal to either T or X. Hence, e G Sp{a}. The only way for 
e to stop belonging to Sp is to super-crash at time rj, a < r) < S. However, by Lemma 9.7, there exists 
an edge e that crashes really at time r/ — (t — 1) or later. Since r/ — (t — 1) > 7, this is a contradiction. 

In the second case v .scan-status(e){a} is equal to D. By the statement 1 of this lemma, the edge e 
is spanned by Sp{a}. Assuming that e is not spanned by Sp{6}, there must exist some edge e in the 
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Figure 15: The paths IiB{w) and IIb{w'). 



network that belongs to the path connecting the endpoints of e of length at most 2t — 1 in Sp{a}, such 
that this edge (e) super-crashes at time rj, a < rj < S. By Lemma 9.7, there exists an edge e that crashes 
really at time — (t — 1) or later. Since rj — {t — 1) > a — {t — 1) = j, this is a contradiction. | 

We recall that the moment an edge e crashes really is the moment when its owner v switches its status 
from SCANNED to CRASHED. By one of the assumptions of the model, the time period that elapses 
between the moment that the edge e crashes physically and crashes really is at most one time unit. (See 
the beginning of Section 9.1.) 

Hence, the next lemma follows directly from Lemma 9.8 

Lemma 9.9 In an asynchronous network, for some time moment j, suppose that no edge crashes really at 
time 7 or later. Suppose that for a time moment a, a > j + t, it holds that v. status (e) {a} = SCANNED, 
v.own{e){a} = SELF. Then statements 1 and 2 of Lemma 9.8 hold. 

Analogously, the next lemma follows directly from Lemma 9.7. 

Lemma 9.10 In an asynchronous network, for a time moment 7, suppose that no edge crashes physically 
on or after time 7. Then no edge super-crashes on or after time 7 + 1. 

The next lemma shows that the quiescence time of our algorithm is at most 3i. For a time moment 
a, recall that E{a} is the set of edges present in the network at this time. 

Lemma 9.11 In an asynchronous network, for a time moment 7, suppose that no edge crashes physically 
at time 7 or later. Then for every time moment a, a > 7 + 8*, every edge e G E{a] is spanned by Sp{a}. 

Proof: Fix a time moment a, a> 7+3t, and consider an edge e = {v, w) G E{a}. Let 5 be the maximum 
time moment such that 6 < a and the edge e super-crashes at time S. 
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If (5 < 7 + 1 then by the proof argument of Lemma 5.4, at time 5 + 2t < 7 + 2t + l the edge e is 
scanned. Hence, by Lemma 9.9, the edge e is spanned starting with the time max{(5 + 2t, 7 + t}. Since 
m.ax{6 + 2t, 7 + t} < 7 + 2t + 1 < a, we are done. 

Hence we are left with the case that (5 > 7 + 1. In this case the edge e crashes virtually at time S. 
(Otherwise, if e crashes really at time S then it crashes physically at time greater or equal to 5 — 1 > 7, 
contradiction.) Suppose without loss of generality that the endpoint v is the owner of the edge e at time 
S. It follows that the vertex v receives the message CRASH from u at time 6 > 7 + 1. By the proof 
argument of Lemma 5.4 and since the edge e does not super-crash during the time interval {5, a), it 
follows that at time S + 2t the edge e is scanned. Thus, at time ( = max{J + 2t, 7 + 1} and later the edge 
e is spanned. Moreover, by Lemma 9.10, 5 <j + t, and thus ^ = max{5 + 2f, 7 + t} < 7 + 3t. | 

9.3.2 The Size of the Maintained Spanner 

We next show that the spanner maintained by the algorithm is sparse. We will use the notation introduced 
in Section 8.3.1 for referring to various time moments. Specifically, for a vertex v and a round R of v, 
£ = £{v, R) (respectively, k = k{v, R)) is defined as the number of edges adjacent to v that are processed 
by V in the crash-loop (rcsp., scan-loop) of the round R of v. For an index i, 1 < i < £ + k, the notation 
terms and "t;.T{i?, i}" are defined exactly as in Section 8.3.1. 

The following lemma shows that for every vertex v, the set v.T of T-edges adjacent to v is sparse. 

Lemma 9.12 Consider a vertex v, a time moment {v^R^i}, and an edge e' = {v,u') adjacent to v such 
that V. status {e'){R,i} = SCANNED, v. scan .status {e'){R,i} = T, v.ownie'){R,i} = SELF. Then the 
value P' = V. label {e'){R,i} belongs to v.A{R,i}. (In other words, the label P' is one of the active labels 
of the vertex v at this time moment.) Moreover, e' is the unique edge adjacent to v with label P' satisfying 
the conditions of the lemma. 

Proof: The proof is by induction on time moment {v, R, i}. At time {v, 1, 1} there are no edges satisfying 
the assumptions of the lemma, and so the induction base holds vacuously. 

Suppose that the lemma holds for a time moment {v, R, i}. Consider an edge e' = {v, u') that satisfies 
the assumptions of the lemma for the time moment {v,R,i + 1}. (We assume without loss of generality 
that {v, R,i + 1}, and not {v, R + l, 1}, is the next time moment after {v, R, i}.) The analysis splits into 
two cases depending on whether the ith processed edge e = {v,u) is processed in the crash-loop or in the 
scan-loop. 

Case 1: The edge e = {v,u) is processed in the crash-loop, that is, the index i satisfies 1 <i < £. The 
analysis splits into two subcases again, depending on whether e = e' or not. 

If e = e' then as a part of the processing of the (super-crashing) T-edge e on the ith iteration of 
the crash-loop, the variable v.status{e') is set to either NOTSCANNED oiCRASHED on line 4 of the 
Procedure Crashltern (Algorithm 7). Hence v.status{e'){R,i -|- 1} 7^ SCANNED, contradiction. 

Hence we are left with the case that e 7^ eJ. By inspection of the pseudo-code of the Procedure 
Crashltern it is easy to verify that processing the edge e may affect the set v. A only if the edge e is 
a T-edge, and consequently, the Procedures Crash and Update^Label are invoked. Let P be the input 
parameter of the two procedures. Let P' = v.label{e'){R, i + 1}. 

If P' < P then the processing has no effect on the record of the edge e' local at v (that is, on the 
variables v.status{e'), v.scan-status{e'), v.own{e'), v.label{e')). Hence, in this case the edge e' satisfies 
the assumption of the lemma at time {f , R, i} as well, and by the induction hypothesis, P' G v.A{R, i}. 
Since in this case the processing has no effect on the variable v. A either, it follows that v.A{^R,i + 1} = 
v.A{R,i} 3 P', as required. Also, the Procedure Crash could not possibly set the variables v.status{e"), 
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v.scan_status{e"), v.own{e"), and v.label{e") to SCANNED, T, SELF, and P', respectively, for some 
other edge e" ^ e', because the Procedure Crash never scans edges. 

11 P' > P then the Condition I of the for-loop of the Procedure Crash is satisfied (see Algorithm 
9), and so on line 4 the variable v.status{e') is set to NOTSCANNED. Hence v.status{e'){R,i + 1} = 
NOTSCANNED , contradicting the assumptions of the lemma at time {v,R,i + 1}. 

Finally, wc arc left with the case P = P'. However, in this case by the uniqueness part of the induction 
hypothesis, e' = e, contradiction. 

Case 2: {£ < i < i + k) 

In this case the edge e' is processed in the scan- loop. Consider first the case that e' = e is the ith 
processed edge. In this case the first part of the lemma follows directly from lines 11-12 of the Procedure 
Dyri-Rnd (Algorithm 5). For the uniqueness part, suppose for contradiction that there is another edge e" 
that satisfies v.sfMus{e"){R,i + l} = SCANNED, v. scan. status {e"){R,i + l} = T, v.own{e"){R,i + l} = 
SELF, and v.label{e"){R,i + 1} = P', and e" / e'. 

The ith iteration of the scan- loop could not possibly alter the record of the T-edge e", and thus 
these variables had the same respective values at time {v,R,i}. Hence, by the induction hypothesis, 
P' £ v.A{R, i}. It follows that the label of v at time {v, R, i} is greater or equal to P', i.e, v.P{R, i} > P'. 
However, on the ith iteration the scan-loop scans the T-edge e', and as a result, the label of the vertex v 
grows to v.P{R,i + 1} > v.P{R,i} > P'. On the other hand, v.P{R,i + 1} = v.label{e'){R,i + 1} = P' , 
contradiction. 

We are now left with the case that e' ^ e. In this case the first part of the lemma follows because pro- 
cessing the edge e in the scan-loop cannot possibly alter one of the variables v. status {e'), v.scan-status{e'), 
v.own{e'), or v.label{e'), for the T-edge e', and neither could it cause v to lose an active label P'. The 
uniqueness part follows by an argument similar to the one we use to prove the uniqueness in the case 
e' = e. I 

Since for every vertex v at any time the set v. A contains at most one active label for each level, it 
contains overall at most t active labels. Hence, by Lemma 9.12, \v.T\ < t — 1 at any point of the execution. 
(Actually, Lemma 9.12 implies only the weaker bound of \v.T\ < t, but it is easy to see that under the 
assumptions of the lemma, the label P' has level at least 1.) We conclude that altogether the spanner 
contains at most n ■ {t — 1) T-edges. 

We next show that the set of X-edges is sparse as well. Consider a vertex v, and a time moment 
{v,R,i}, i<e + k, i = e{v,R), k = k{v,R). Let v.A = v.A{R,i} = {Pq,Pi, . . . ,Pq), Pq < Pi < ■ ■ ■ < Pq, 
be the sequence of active labels of the vertex v at time {y,R,i} in an increasing order. 

Consider the vertex set v.X defined by the following process. Whenever the vertex v X-scans an 
edge e (in the scan-loop), this edge is inserted into the set v.X. (At the same time the edge e is inserted 
into the set v.X too.) Whenever the vertex v loses labels in the Procedure Crash, all edges e that are 
removed from the set v.X are removed from the set v.X as well. The difference between the two sets 
v.X and v.X is that edges of v.X may crash and be removed from v.X, and other (dropped) edges may 
be inserted into v.X instead. These events have, however, no effect on the set v.X. Consequently, there 
may be edges in v.X that do not belong to v.X, and edges that belong to v.X and do not belong to v.X. 
However, we next argue that the cardinality of the set v.X is always greater or equal to the cardinality 
of the set v.X. (See also Section 8.3.4 for an analogous argument.) 

Lemma 9.13 At any time during an execution of the algorithm, \v.X\ > \v.X\. 

Proof: An edge e' may be inserted into v.X and not inserted into v.X only on line 11 of the Procedure 
XReplace (Algorithm 8). However, on this line some other edge e is necessarily removed from v.X, and 
is not removed from v.X, proving the lemma. | 
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Our strategy for proving upper bounds on \v.X\ is proving the desired bounds on |f 

Suppose that at a time moment {v, R, i}, v. A = v.A{R, i} = (Pq, Pi, ... , Pq). For j = 0, 1, . . . , let 

v.Xj{R,i} denote the subset of ah edges e of v.X{R,i] that satisfy v.secJabel{e) = Pj. It is easy to see 

(by an induction on time moments {v, R, i}) that 

g 

v.X{R,i} = (j v.Xj{R,i} . 

j=0 

We next show that each of the sets v.Xj{R,i} is sparse. 

Suppose that the vertex v acquired the label Pj at time {v, Rj,ij}, for some round Rj of v and index 
ij of a processed edge. Then the pair {Rj,ij} is called the acquire-time of the label Pj (by the vertex 
v). For a vertex v, a time moment {v,R,i}, and an edge e, the scan-time of the edge e (with respect 
to {v, R, i}) is the time moment when the vertex v scanned the edge e for the last time before the time 
{v, R, i}. Let Ij = [{Rj,ij}, {Rj+i,ij+i}) denote the time interval during which the vertex v was labeled 
by Pj. The last interval Iq is defined as Iq = [{Rq. iq}, {/?,,?'}). (The interval Ij includes its left endpoint 
{Rj,ij}, but does not include its right endpoint ij+i}. The right endpoint of the interval Iq is the 

current time moment {v,R,i}.) 

Lemma 9.14 For a vertex v, a round R of v, an index i, l<i<£ + k, £ = i{v, R), k = k{v, R), and 
an edge e G v.Xj{R,i} , the scan-time of e belongs to the interval Ij. 

Proof: The proof is by induction on time moment {u, i?, z}. The induction base {v, 1, 1} holds vacuously. 
For the induction step suppose that v.A{R, i} = {Pq, Pi, ... , Pq), and suppose that the statement of the 
lemma is true for {v, R, i}. We next prove it for {v,R,i-\-l}. (We assume without loss of generality that 
{v, R,i -\- 1} is the next time moment after {v, R, i}.) 

The proof splits into two cases, according to the value of the index i. 

Case 1: {£ + I < i < £ + k) 

In this case between the time {v,R,i} and {v,R,i + 1}, the vertex v scans an edge e = {v,u). For the 
vertex v to scan the edge e = {v, u), it must hold that P{u) >- P{v), where P{v) is the current label of v 
(that is, P{v) = Pq), and P{u) is the label of u that v has received from u on its round R. 

If the edge e is either T- or D-scanned, then no new edge is inserted into v.X, and we are done. 
Otherwise, if e is X-scanned, then since v.secJabel{e) is set to P{v) = Pq on line 15 of Algorithm 
5, it follows that the edge e joins the set v.Xq. The scan-time of e, {v,R,i}, belongs to the interval 
Iq = [{Rq, iq}, {R, i + 1}), and we are done. 

Case 2: {l<i<l) 

In this case between the time moments {v, R, i} and {v, R,i + 1}, the vertex v processes a super-crash of 
an edge e = {v, u). If e is peer-scanned, or if it is either an X- or a I?-edge, its super-crash has no effect 
on the set v.X. 

Hence we are left with the case that e is a T-edge. In other words, we next show that an invocation 

Crash{P*) local at v, for some active label P* G v. A, does not ruin the induction invariant. 

The Procedure Crash starts with removing from v. A all labels greater or equal to P* . Let j, < j < q, 
be the maximum index such that Pj < P* and Pj € v. A. (Note that Pj is equal to the label P returned 
by the invocation of the Procedure Update -Label.) The set v. A becomes v.A{R, i-\-l} = {Pq, Pi, ... , Pj). 
Moreover, the Procedure Crash removes from v.X all X-edges owned by v with a label greater or equal 
to Pj. (Recall the Condition III of the Procedure Crash (Algorithm 9).) By definition of v.X, all these 
edges are also removed from the set v.X. Finally, for an edge e' G v.X^, for an index h, < h < j, the 
statement of the lemma holds by the induction hypothesis. | 
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We next show that the sets v.Xj are sparse. 

Lemma 9.15 For a vertex v, a round R of v, and an index h, l<h<£ + k, £ = i(v, R), k = k{v, R), 
and an index j, < j < q, (such that v.A{R, h} = {Pq, Pi, . . . , Pg) ) 

with high probability. 

Proof: By Lemma 9.14, v.Xj{R,h} is the set of edges inserted into v.X during the time interval Ij. 
In other words, edges of v.Xj were inserted there while the label of v was equal to Pj. Let r] = (ei = 
{ui,v),e2 = {u2,v), . . . ,ek = (uk,v)) be the sequence of all edges inserted into v.X during the time 
interval Ij. Let a = {P(^\P^'^\ . . . ,pW), = P{ui), i G [k], be the sequence of labels of the vertices 
ui, U2, ■ ■ . , Uk- (The label P^'^ = P{ui) is the label of Ui that v received from Ui right before scanning the 
edge Ci.) 

The edge was inserted into v.X only if the base value B^^^ = B(P^^^) appears in the sequence for 
the first time. Moreover, all the labels P^'^ must be not selected. We can also assume that all these labels 
are of level t — 2 or smaller. To justify it recall that with high probability the overall number of labels of 
level t — 1 is O " • n^/*^ , and at most one edge is inserted into v.X for each such a label. 

While the vertex v was reading the edges of the sequence t], it encountered no edges e' = (v, u') with 
P{u') = P' being a selected label, and P' >- Pj. In other words, v encountered k not selected labels 
with distinct base values in a row. However, for a positive constant c, the probability for this event with 
k = c - (f)^^* ■ log^~^/*n to hold is at most and so with high probability, 

\v.Xj{R,h}\ = \r,\ = k = o((^)'^*-logi-V*n) . | 

The next corollary follows directly from Lemma 9.15 and Lemma 9.13. 

Corollary 9.16 For a vertex v, and a round R of v, and an index h, l<h<£ + k, £ = £{v,R), 
k = k{v,R), with high probability, 

\v.X{R, h}\ = 0{n}l^ ■ t^-^l* ■ log^-V* n) . 

The next corollary shows that the overall set of X-edges used by the spanner maintained by our 
algorithm is sparse. 

Corollary 9.17 For an asynchronous network, at a time moment a, with high probability, 

\\]v.X{a}\ = 0(ni+i/*-ti-V*.logi-V*„) . 
vev 

Proof: For a vertex v, let Ry denote the round on which the vertex v is at time a, and hy denote the 
stage of the local execution of the vertex v on round Py which v executes at time a. It follows that 
v.X{a} = v.X{Ry,hy}. By Corollary 9.16, 

|^;.X{a}| = \v.X{Ry,K}\ = 0(nV* . t^-V* . logi-V* ^ 

with high probability. 
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Hence, with high probabiUty, 



I U v.X{a]\ = Oin^+^Z' ■ t"'^" ■ log^-V* n) . | 

Since the set U?;e\/ ^•^{'^} cardinality at most n ■ {t — 1), it follows that the set Sp{a} = 
U^g^ v.T{a}[J{j^^y v.X{a} has, with high probability, 0(n^+Vt.ti-Vt.log^~V* n) edges. We summarize 
the section with the following theorem. 

Theorem 9.18 The presented algorithm is a fully dynamic distributed algorithm that maintains a {2t — 
1) -spanner for an unweighted gra,ph in a synchronous or asynchronous network. The size of the maintained 
spanner is 0(n^+^/* • i^"^/* • log^^^/* n), with high probability over the coin tosses of the algorithm. The 
quiescence time of the algorithm is at most 3t time units. 

Moreover, suppose that no edge crashes after time 7 (but edges are allowed to appear). Consider 
an edge e present in the graph at some time 7. Then the spanner maintained by the algorithm 

provides stretch guarantee of 2t — 1 for this edge at time /? + 3t and later. 

Furthermore, t time units after the last hard crash all the results for the semi-decremental setting start 
to apply. Particularly, if the last hard crash occurs at time 7, and no edge crashes between time 7 and 
7 + then any edge present in the network at time /3 > 7 + t will be {2t — 1) -spanned by the maintained 
spanner on or before time P + 2t. 

In addition, if only soft crashes are allowed then the quiescence time of the algorithms is at most 2t 
(instead of 2>t) time units. Finally, if only incremental updates are allowed then every edge e is (2t — 1)- 
spanned by the spanner within at most 2t time units after it appears, even if incremental updates keep 
occurring in-between. 

We finish the section with a number of remarks. 

Remark: The algorithm needs to know the number of vertices n to compute the probability p that it 
uses for selecting labels. However, it is easy to see that the same argument works if instead of n we would 
use an upper bound n > n on the number of vertices. In this case the bound on the number of edges in 
the spanner would become 

. ti-i/t . logi-i/t fi). If the estimate h is allowed to be smaller than 
n then the bound becomes O (^^i^ttt • t^^^/^ ■ log^^^/* . 

We remark, however, that if one is interested in an 0(logn)-spanner then p can be set to 1/2, and, 
the algorithm does not need to know neither the number n of vertices nor an estimate of n. 

Remark: For a vertex v, and a label P such that v was labeled by P during a time interval / of an 
execution of our algorithm, let v.X{P,I) denote the set of edges e = {v,u) that were inserted into v.X 
during this time interval. 

Our previous argument shows that for a constant c, c > 0, with probability at least 1 — it holds that 
\v.X{P, I)\ < c-log^~^/* n- [n/tY^^ . Let denote the overall number of distinct triples (w, P, /) such that 
V was labeled by P during the time interval / on a certain execution ip of the algorithm. (Moreover, for 
a triple {v., P, I) to be counted, the interval / must be maximal with respect to containment. Specifically, 
it must hold that there is no time interval /' such that / C /' and the triple {v,P,I') satisfies the above 
condition as well.) 

By union-bound it follows that the probability that the size of the spanner is at most c ■ log^"^''* n • 
^1-1/* . at every time moment during the execution (p is at least 1 — In the semi-decremental 

setting each vertex can be labeled by at most t different labels during the execution (p, and so N < n ■ t, 
and this probability is at least 1 — In the fully dynamic setting (when hard crashes are allowed as 

well), the number N may be larger than any function of n and t. 
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Let M denote the overall number of hard crashes occurring during the algorithm. Then the mimbcr 
of triples (v, P, I) as above is at most M -n-t. (To justify this inequality we note that even if each hard 
crash makes each vertex to lose all its t active labels, still there are at most n ■ t triples per crash.) Hence 
in this case the probability that the spanner has size at most c • log^^^^^n • t^~^/^ ■ n^+'^/^ at every time 
moment during the execution is at least 1 — ^J^i^^ ■ Consequently, as long as the number M of hard crashes 

during the execution is bounded by a polynomial in n, the spanner contains 0(log"^~"^/* n • t^^^/* • n^'^^/*) 
edges with high probability, where the constant hidden by the O-notation depends on the degree of this 
polynomial. Moreover, even if M is quasi-polynomial in n [M = nP°'y^°g (")), stih the bound on the size 
of the spanner is 0(polylog(ra) • log^"^''* n ■ t^~^^^ ■ n^+^/*). 

Finally, if a vertex v detects that its set v.X becomes too large as a result of either "poor luck" or too 
many hard crashes experienced in its neighborhood, v may decide to toss fresh coins. Interestingly, the 
algorithm is sufficiently robust to ensure that tossing fresh coins does not require any synchronization 
between different vertices. Specifically, for the vertex v to toss fresh coins it just crashes (actually, 
simulates a vertex crash), and emerges again. The network processes a crash of a vertex x as crashes of 
all edges adjacent to x, and an appearance of a vertex x as an appearance of all edges adjacent to it. 
(Here it is assumed that the vertex has a unique identifier. If this is not the case, the identifier is drawn 
at random from an appropriate probability distribution.) 

Remark: In a weighted version of the algorithm each vertex v actually runs in parallel logj^_)_g uj instances 
of the algorithm, one for each range of edges. (Recall that u is the aspect ratio of the network, that 
is, the ratio between the largest and the smallest edge weights.) If an edge e changes weight then there 
are two possibilities. If it changes weight within the same weight range [(1 + e)*, (1 + e)*"*"^) for some 
integer i, then no action is needed. If its weight moves from the range [(1 + e)*, (1 + e)*"*"^) to the range 
[(1 + ey, (1 + e)-'^-'^) for some j ^ i, then the ith instance of the algorithm will consider this event as a 
crash of the edge e, and the jth instance of the algorithm will consider this event as an appearance of a 
new edge in the network. 

10 Lower Bounds 

In this section wc show that for any t, any static algorithm for constructing sparse {2t — l)-spanners 
requires 0,(t) rounds even in the synchronous setting, even when arbitrarily large messages are allowed. 
We also show the same lower bound on the quiescence time of any algorithm that maintains sparse 
spanners in a distributed fully dynamic setting. 

We need the following terminology. For a graph G = {V, E), a vertex v, and a positive integer i, the 
i-neighborhood of v in G is the subgraph of G induced by all the vertices at distance i or less from v in 
G. The length (either in terms of number of edges or vertices) of the longest cycle in a graph G is called 
the girth of G. 

Also, for a function / : IN ^ IN, the notation 0{f{n)) stands for 0{f{n) ■ polylog(n)). 
The next lemma is central in our lower bounds. 

Lemma 10.1 Let g : JN ^ JN be a monotone increasing function. For a positive integer t, suppose that 

for infinitely m,any positive integers n there exist n-vertex graphs with girth greater or equal to g{t) with 

any static distributed synchronous algorithm for constructing {2t — l)-spanners 

with 0(71^"*"^/*) edges for unweighted graphs requires at least ^^^^ — 1^ rounds. 

Proof: Suppose that an algorithm H constructs a (2t — l)-spanner with 0{n^'^^^*) edges for any input 
n-vertex graph G within ( ^^^^ — 2 j rounds. Choose a sufficiently large n such that there exists an 
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n-vertex graph G' with 0(71^"^ edges and with girth at least g{t — 1). 

Consider an execution ip' of the algorithm 11 on G'. For a vertex t; in G', within ^^^^^ — 2^ rounds 

the vertex v is capable of collecting the topology of its {^^^y^ ~ 1^ -neighborhood in G'. (Note that in 

zero rounds, with no communication at all, the vertex v knows which edges are adjacent to v.) Since the 
girth of G' is at least g{t — 1), it follows that this neighborhood is a tree. 

We next argue that based on this information the vertex v has to include all edges adjacent to v in 
the constructed spanner. Suppose for contradiction that this is not the case. Consider an execution (p of 

the algorithm 11 on a tree r in which the {^^^^ — 1^ -neighborhood of the vertex v is isomorphic to its 

neighborhood in G' . Hence the vertex v behaves identically in the two executions (p and <p', and does not 
include in the spanner one or more of the edges adjacent to it in r. However, it follows that the spanner 
that the algorithm H constructs for the tree r is not connected, contradiction. 

Hence the spanner constructed by the algorithm H for the graph G' contains r2(n^^~) edges. This 
is a contradiction to the assumption that the algorithm constructs spanners of size 0{v}'^^/*). | 

It is easy to verify that Lemma 10.1 extends to randomized algorithms that (always) produce correct 
{2t — l)-spanners, but provide a guarantee on the size of constructed spanners only in expectation, or with 
high probability. (Our algorithm is of this kind.) 

Under the Erdos girth conjecture, g{t) = 2t + 2. Hence our lower bound is ^^^2^^ — 1 = t — 1. The 
Erdos girth conjecture is proven for the values 1,2,3, and 5 of the parameter {t — 1). Hence the lower 
bound {t — 1) holds unconditionally for t = 2,3, 4, and 6. Using the bounds on g{t) for small values of t 

due to [36, 19, 37] it is easy to verify that for values t = 5,7, 8, 9, and 10 our lower bound ^^^^5-^ — 1^ is 
equal to 3, 5, 5, 6, and 7, respectively. 

Also, Lazebnik et al. [27] (based on the construction of Lubotzky et al. [28]) showed that for 
t - 1 = 3{r - I), r > 5, g{t - 1) = 4r, and for i - 1 = 3r - 1, r > 4, g(t - 1) = 4r + 2. It follows that in 
the first case the lower bound is |t + ^, and in the second case it is |t. Overall, the lower bound of 
applies for all values of t, t > 2. 

We summarize these lower bounds with the next theorem. 

Theorem 10.2 For an integer constant t > 2, any static distributed synchronous algorithm for con- 
structing {2t — \)-spanners with 0(n^+^/*) edges for unweighted n-vertex graphs requires at least 
rounds. Moreover, slightly stronger bounds hold for some small constant values of t. Finally, under the 
Erdos girth conjecture, the lower bound becomes t — \. 

Note that in a fully dynamic setting all edges may crash at once, and a completely new set of edges 
may show up on instantly. Since a fully dynamic algorithm is supposed to handle such a situation 
efficiently (and our algorithm indeed does handle it within 3 • t time units), it follows that the lower 
bound of Theorem 10.2 applies to the fully dynamic algorithms as well. 

Like Lemma 10.1, Theorem 10.2 applies for randomized algorithms that always provide a correct 
spanner, but provide a guarantee on the size of the constructed spanner either in expectation or with high 
probability. 

Note that the analysis above extends for super-constant values of t. Specifically, the lower bound 
applies as is as long as 1 < i = o (^Y^ io'giog^ • A somewhat weaker lower bound Q,{t) applies to a wider 

range of parameter t, 1 < t = O (y \og\ogn ) ■ '^^ verify it, suppose for contradiction that there exists an 
algorithm H that constructs (2t — l)-spanners of expected size 0(t -n^"*"^/*) in a-i rounds, for a sufficiently 
small constant a > 0. Consider a graph G of girth 2a-t + 4 with Vl{n^^ai) edges. By a previous argument, 
the algorithm H returns the entire edge set of G as its {2t — l)-spanner, and thus constructs a spanner of 
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size U{'n}'^'^). However, > t ■ n^/* for a sufficiently small positive a, and t = O (j^^^^ ■ Moreover, 

as long ast = o (^ i^gf^^n ) ' lower bound is actually (| — o{l))t. 

Finally, in the complementary range of t, uo (^ logiogn ) — O(logra), the lower bound of Vl ^ ^^^^^^^ j 
follows by the same argument. 



11 Open Questions 

We present a sample of open questions that are related to our study. 



1. Perhaps the most obvious open question is to close the constant gap between our upper and lower 
bounds of 3i and ^, respectively, on the best possible quiescence time of a dynamic algorithm for 

maintaining sparse spanners. Also, the lower bound of y applies only for t = o ^ ipg^g^ ^ ■, and it is 
desirable to extend it to the entire range of t, 1 < t = O(logn). 

One way to do it is to improve our bound on the expected size of constructed spanners from 
0(i-ni+V«) to 0(ni+Vt). 

2. Another avenue is to weaken the assumptions on computational model that are needed for our 
result. Specifically, in this paper the adversary that determines the topology updates is assumed 
to be non-adaptive and oblivious to the coin tosses of the algorithm. Devising an algorithm with 
properties similar to that of our algorithm in the presence of a more powerful adversary appears to 
be a challenging problem. 

3. Our algorithm is randomized, and randomization is crucial for our analysis. Derandomizing our 
result is a challenging problem as well. 

4. To this day there are only a handful of distributed algorithms for basic graph-theoretic problems 
that are provably applicable to a dynamic environment. We hope that our study will stimulate 
further development of this important area. Particularly, it would be very interesting to devise 
dynamic distributed algorithms for such basic problems as MST, MIS, and vertex cover. 
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